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Preface 


During the past three decades, the world has seen significant changes in the telecom- 
munications industry. There has been rapid growth in wireless communications, as 
seen by large expansion in mobile systems. Wireless communications have moved 
from first-generation (1G) systems primarily focused on voice communications to 
third-generation (3G) systems dealing with Internet connectivity and multi-media 
applications. The fourth-generation (4G) systems will be designed to connect wire- 
less personal area networks (WPANSs), wireless local area networks (WLANs) and 
wireless wide-area networks (WWANS). 


With the Internet and corporate intranets becoming essential parts of daily 
business activities, it has become increasingly advantageous to have wireless offices 
that can connect mobile users to their enterprises. The potential for technologies 
that deliver news and other business-related information directly to mobile devices 
could also develop entirely new revenue streams for service providers. 

The 3G mobile systems are expected to provide worldwide access and global 
roaming for a wide range of services. The 3G WWANS are designed to support 
data rates up to 144kbps with comprehensive coverage and up to 2 Mbps for 
selected local areas. Prior to the emergence of 3G services, mobile data networks 
such as general packet radio service (GPRS) over time division multiple-access 
(TDMA) systems and high-speed packet data over IS-95 code-division multiple 
access (CDMA) systems were already very popular. At the same time, after the 
introduction of Bluetooth and imode technology in 1998, local broadband and 
ad hoc wireless networks attracted a great deal of attention. This sector of the 
wireless networking industry includes the traditional WLANs and the emerging 
ҰРАМ. 

Multi hop wireless ad hoc networks complement the existing WLAN stan- 
dards like IEEE 802.11a/b/g/n and Bluetooth to allow secure, reliable wireless 
communications among all possible hand-held devices such as personal digital 
assistances (PDAs), cell-phones, laptops, or other portable devices that have a 
wireless communication interface. Ad hoc networks are not dependent on a single 
point of attachment. The routing protocols for ad hoc networks are designed to 
self-configure and self-organize the networks to seamlessly create an access point 
on the fly as a user or device moves. 

Provisioning data services over the wireless data networks including ad hoc 
networks requires smart data management protocols and new transaction models 
for data delivery and transaction processing, respectively. While personalization of 
data services is desired, over personalization will have ramifications on scalability 
of wireless networks? As such, mobile computing not only poses challenges but 
also opens up an interesting research area. It is redefining existing business models 
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and creating entirely new ones. Envisioning new business processes vis-à-vis the 
enabling technologies is also quite interesting. 

Over the past decade, wireless data networking has developed into its 
own discipline. There is no doubt that the evolution of wireless networks has 
had significant impact on our lifestyle. This book is designed to provide a uni- 
fied foundation of principles for data-oriented wireless networking and mobile 
communications. 

This book is an extensive enhancement to the Wireless & Personal Com- 
munications book published by Prentice Hall in 1996, which primarily addressed 
2G cellular networks. Since then, wireless technologies have undergone significant 
changes; new and innovative techniques have been introduced, the focus of wire- 
less communications is increasingly changing from mobile voice applications to 
mobile data and multimedia applications. Wireless technology and computing 
have come closer and closer to generating a strong need to address this issue. In 
addition, wireless networks now include wide area cellular networks, wireless 
local area networks, wireless metropolitan area networks, and wireless personal 
area networks. This book addresses these networks in extensive detail. The book 
primarily discusses wireless technologies up to 3G but also provides some insight 
into 4G technologies. 

It is indeed a challenge to provide an over-arching synopsis for mobile data 
networking and mobile communications for diverse audiences including manag- 
ers, practicing engineers, and students who need to understand this industry. My 
basic motivation in writing this book is to provide the details of mobile data 
networking and mobile communications under a single cover. In the last two 
decades, many books have been written on the subject of wireless communica- 
tions and networking. However, mobile data networking and mobile commu- 
nications were not fully addressed. This book is written to provide essentials of 
wireless communications and wireless networking including WPAN, WLAN, 
WMAN, and WWAN. The book is designed for practicing engineers, as well as 
senior/first-year graduate students in Electrical and Computer Engineering (ECE), 
and Computer Science (CS). 

The first thirteen chapters of the book focus on the fundamentals that are 
required to study mobile data networking and mobile communications. Numerous 
solved examples have been included to show applications of theoretical concepts. 
In addition, unsolved problems are given at the end of each chapter for practice. 

After introducing fundamental concepts, the book focuses on mobile net- 
working aspects with several chapters devoted to the discussion of WPAN, WLAN, 
WWAN, and other aspects of mobile communications such as mobility manage- 
ment, security, and cellular network planning. Two additional “Bonus” chapters 
on inter-working between WLAN and WWAN and on 4G systems (along with 
several helpful appendices) are available free on the book's website at http://books. 
elsevier.com/9780123735805. 
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Most of the books in wireless communications and networking appear to 
ignore the standard activities in the field. I feel students in wireless networking 
must be exposed to various standard activities. I therefore address important 
standard activities including 3GPP, 3GPP2, IEEE 802.11, IEEE 802.15 and IEEE 
802.16 in the book. This feature of the book is also very beneficial to the profes- 
sionals who wish to know about a particular standard without going through the 
voluminous material on that standard. 

A unique feature of this book that is missing in most of the available books 
on wireless communications and networking is to offer a balance between theo- 
retical and practical concepts. This book can be used to teach two semester courses 
in mobile data networking and mobile communications to ECE and CS students. 
Chapter 4 may be omitted for ECE students and Chapter 14 for CS students. 

The first course— Introduction to Wireless Communications and Networking 
can be offered to senior undergraduate and first year graduate students. This should 
include first fourteen chapters. Chapters 4 and 14 may be omitted depending on 
the students’ background. The second course— Wireless Data Networking should 
include Chapters 15 through 23. The first course should be a pre-requisite to the 
second course. The student should be given homework, two examinations, and a 
project to complete each course. In addition, this book can also be used to teach 
a comprehensive course in Wireless Data Networking to IT professionals by using 
Chapters 2, 3, 5, 6, 7, 11, 15, 16, and 18 to 22. 

During the preparation of this manuscript my family members were very sup- 
portive. I would like to thank my children, Nina, Meena, and Ravi. Also, I appreci- 
ate the support given by my wife, Pushpa. In addition, I appreciate the support of 
the reviewers, Elaine Cheong, Frank Farrante, and Pei Zhang in providing valuable 
comments on the manuscript. Finally, I am thankful of Rachel Roumeliotis for 
coordinating the reviews of the manuscript. 


Vijay K. Garg 
Willowbrook, IL 
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CHAPTER 1 


An Overview of Wireless Systems 


1.1 Introduction 

The cellular system employs a different design approach than most commercial 
radio and television systems use [1,2]. Radio and television systems typically 
operate at maximum power and with the tallest antennas allowed by the regula- 
tory agency of the country. In the cellular system, the service area is divided into 
cells. A transmitter is designed to serve an individual cell. The system seeks to 
make efficient use of available channels by using low-power transmitters to allow 
frequency reuse at much smaller distances. Maximizing the number of times each 
channel can be reused in a given geographic area is the key to an efficient cellular 
system design. 

During the past three decades, the world has seen significant changes in 
the telecommunications industry. There have been some remarkable aspects to 
the rapid growth in wireless communications, as seen by the large expansion in 
mobile systems. Wireless systems consist of wireless wide-area networks (WWAN) 
[i.e., cellular systems], wireless local area networks (WLAN) [4], and wireless 
personal area networks (WPAN) (see Figure 1.1) [17]. The handsets used in all 
of these systems possess complex functionality, yet they have become small, low- 
power consuming devices that are mass produced at a low cost, which has in turn 
accelerated their widespread use. The recent advancements in Internet technology 
have increased network traffic considerably, resulting in a rapid growth of data 
rates. This phenomenon has also had an impact on mobile systems, resulting in 
the extraordinary growth of the mobile Internet. 

Wireless data offerings are now evolving to suit consumers due to the simple 
reason that the Internet has become an everyday tool and users demand data 
mobility. Currently, wireless data represents about 15 to 20% of all air time. While 
success has been concentrated in vertical markets such as public safety, health 
care, and transportation, the horizontal market (i.e., consumers) for wireless data 
is growing. In 2005, more than 20 million people were using wireless e-mail. The 
Internet has changed user expectations of what data access means. The ability to 
retrieve information via the Internet has been *an amplifier of demand" for wire- 
less data applications. 

More than three-fourths of Internet users are also wireless users and a mobile 
subscriber is four times more likely to use the Internet than a nonsubscriber to 
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Figure 1.1 Wireless networks. 


mobile services. Such keen interest in both industries is prompting user demand 
for converged services. With more than a billion Internet users expected by 2008, 
the potential market for Internet-related wireless data services is quite large. 

In this chapter, we discuss briefly 1G, 2G, 2.5G, and 3G cellular systems 
and outline the ongoing standard activities in Europe, North America, and Japan. 
We also introduce broadband (4G) systems (see Figure 1.2) aimed on integrating 
WWAN, WLAN, and WPAN. Details of WWAN, WLAN, and WPAN are given 
in Chapters 15 to 20. 


1.2 First- and Second-Generation Cellular Systems 
The first- and second-generation cellular systems are the WWAN. The first public 
cellular telephone system (first-generation, 1G), called Advanced Mobile Phone 
System (AMPS) [8,21], was introduced in 1979 in the United States. During the 
early 1980s, several incompatible cellular systems (TACS, NMT, C450, etc.) were 
introduced in Western Europe. The deployment of these incompatible systems 
resulted in mobile phones being designed for one system that could not be used 
with another system, and roaming between the many countries of Europe was 
not possible. The first-generation systems were designed for voice applications. 
Analog frequency modulation (FM) technology was used for radio transmission. 
In 1982, the main governing body of the European post telegraph and tele- 
phone (PTT), la Conférence européenne des Administrations des postes et des 


1.2 First- and Second-Generation Cellular Systems 3 


Spectral 0.15bps/Hz 0.30 bps/Hz 3 4bps/Hz (targeted) 
Efficiency Max. rate 64kbps Max. rate 2 Mbps Мах. rate: 200 Mbps 
TDMA & CDMA TDMA, CDMA and WCDMA WCDMA 


FDMA 


4G 
Smart antennas? 
MIMO? 
Adaptive system 
OFDM modulation 


2G 
Digital modulation 
Convolution coding 
Power control 


2.5G/3G 
Hierarchal cell structure 
Turbo-coding 


AMPS PDC EDGE 
TACS GSM cdma2000 
NMT HSCSD WCDMA/UMTS 
C-450 GPRS 3G 1X EV-DO 
IS-54/IS-136 3G 1X EV-DV 
1S-95/1$-95A/IS-95B 
PHS 


PHS: Personal handy phone system (Japan) 
MIMO:  Multi-input and multi-output 
OFDM: Orthogonal Frequency Division Multiple Access 


Figure 1.2 Wireless network from 1G to 4G. 


télécommunications (CEPT), set up a committee known as Groupe Special Mobile 
(GSM) [9], under the auspices of its Committee on Harmonization, to define a mobile 
system that could be introduced across western Europe in the 1990s. The CEPT 
allocated the necessary duplex radio frequency bands in the 900 MHz region. 

The GSM (renamed Global System for Mobile communications) initiative 
gave the European mobile communications industry a home market of about 300 
million subscribers, but at the same time provided it with a significant technical 
challenge. The early years of the GSM were devoted mainly to the selection of 
radio technologies for the air interface. In 1986, field trials of different candidate 
systems proposed for the GSM air interface were conducted in Paris. A set of crite- 
ria ranked in the order of importance was established to assess these candidates. 

The interfaces, protocols, and protocol stacks in GSM are aligned with the 
Open System Interconnection (OSI) principles. The GSM architecture is an open 
architecture which provides maximum independence between network elements (see 
Chapter 7) such as the Base Station Controller (BSC), the Mobile Switching Center 
(MSC), the Home Location Register (HLR), etc. This approach simplifies the design, 
testing, and implementation of the system. It also favors an evolutionary growth 
path, since network element independence implies that modification to one network 
element can be made with minimum or no impact on the others. Also, a system 
operator has the choice of using network elements from different manufacturers. 
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GSM 900 (i.e., GSM system at 900 MHz) was adopted in many countries, 
including the major parts of Europe, North Africa, the Middle East, many east 
Asian countries, and Australia. In most of these cases, roaming agreements exist 
to make it possible for subscribers to travel within different parts of the world and 
enjoy continuity of their telecommunications services with a single number and a 
single bill. The adaptation of GSM at 1800 MHz (GSM 1800) also spreads cover- 
age to some additional east Asian countries and some South American countries. 
GSM at 1900 MHz (i.e., GSM 1900), a derivative of GSM for North America, 
covers a substantial area of the United States. All of these systems enjoy a form 
of roaming, referred to as Subscriber Identity Module (SIM) roaming, between 
them and with all other GSM-based systems. A subscriber from any of these sys- 
tems could access telecommunication services by using the personal SIM card in a 
handset suitable to the network from which coverage is provided. If the subscriber 
has a multiband phone, then one phone could be used worldwide. This globaliza- 
tion has positioned GSM and its derivatives as one of the leading contenders for 
offering digital cellular and Personal Communications Services (PCS) worldwide. 
А PCS system offers multimedia services (i.e., voice, data, video, etc.) at any time 
and any where. With a three band handset (900, 1800, and 1900 MHZ), true 
worldwide seamless roaming is possible. GSM 900, GSM 1800, and GSM 1900 
are second-generation (2G) systems and belong to the GSM family. Cordless Tele- 
phony 2 (CT2) is also a 2G system used in Europe for low mobility. 

Two digital technologies, Time Division Multiple Access (TDMA) and Code 
Division Multiple Access (CDMA) (see Chapter 6 for details) [10] emerged as clear 
choices for the newer PCS systems. TDMA is a narrowband technology in which 
communication channels on a carrier frequency are apportioned by time slots. For 
TDMA technology, there are three prevalent 2G systems: North America TIA/ 
EIA/IS-136, Japanese Personal Digital Cellular (PDC), and European Telecom- 
munications Standards Institute (ETSI) Digital Cellular System 1800 (GSM 1800), 
a derivative of GSM. Another 2G system based on CDMA (TIA/EIA/IS-95) is a 
direct sequence (DS) spread spectrum (SS) system in which the entire bandwidth of 
the carrier channel is made available to each user simultaneously (see Chapter 11 
for details). The bandwidth is many times larger than the bandwidth required to 
transmit the basic information. CDMA systems are limited by interference pro- 
duced by the signals of other users transmitting within the same bandwidth. 

The global mobile communications market has grown at a tremendous pace. 
There are nearly one billion users worldwide with two-thirds being GSM users. 
CDMA is the fastest growing digital wireless technology, increasing its world- 
wide subscriber base significantly. Today, there are already more than 200 million 
CDMA subscribers. The major markets for CDMA technology are North Amer- 
ica, Latin America, and Asia, in particular Japan and Korea. In total, CDMA has 
been adopted by almost 50 countries around the world. 

The reasons behind the success of CDMA are obvious. CDMA is an advanced 
digital cellular technology, which can offer six to eight times the capacity of analog 
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technologies (AMP) and up to four times the capacity of digital technologies such 
as TDMA. The speech quality provided by CDMA systems is far superior to any 
other digital cellular system, particularly in difficult RF environments such as dense 
urban areas and mountainous regions. In both initial deployment and long-term 
operation, CDMA provides the most cost effective solution for cellular operators. 
CDMA technology is constantly evolving to offer customers new and advanced 
services. The mobile data rates offered through CDMA phones have increased and 
new voice codecs provide speech quality close to the fixed wireline. Internet access 
is now available through CDMA handsets. Most important, the CDMA network 
offers operators a smooth migration path to third-generation (3G) mobile systems, 
[3,5,7,11]. 


1.3 Cellular Communications from 1G to 3G 

Mobile systems have seen a change of generation, from first to second to third, 
every ten years or so (see Figure 1.3). At the introduction of 1G services, the 
mobile device was large in size, and would only fit in the trunk of a car. All 
analog components such as the power amplifier, synthesizer, and shared antenna 
equipment were bulky. 1G systems were intended to provide voice service and 
low rate (about 9.6kbps) circuit-switched data services. Miniaturization of 
mobile devices progressed before the introduction of 2G services (1990) to the 
point where the size of mobile phones fell below 200 cubic centimeters (cc). The 
first-generation handsets provided poor voice quality, low talk-time, and low 
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Figure 1.3 Cellular networks (WWAN) evolution from 1G to 3G. 
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standby time. The 1G systems used Frequency Division Multiple Access (FDMA) 
technology (see Chapter 6) and analog frequency modulation [8,20]. 

The 2G systems based on TDMA and CDMA technologies [6] were primarily 
designed to improve voice quality and provide a set of rich voice features. These 
systems supported low rate data services (16—32 kbps). 

For second-generation systems three major problems impacting system cost 
and quality of service remained unsolved. These include what method to use for 
band compression of voice, whether to use a linear or nonlinear modulation scheme, 
and how to deal with the issue of multipath delay spread caused by multipath 
propagation of radio waves in which there may not only be phase cancellation but 
also a significant time difference between the direct and reflected waves. 

The swift progress in Digital Signal Processors (DSPs) was probably fueled 
by the rapid development of voice codecs for mobile environments that dealt with 
errors. Large increases in the numbers of cellular subscribers and the worries of 
exhausting spectrum resources led to the choice of linear modulation systems. 

To deal with multipath delay spread, Europe, the United States, and Japan 
took very different approaches. Europe adopted a high transmission rate of 
280kbps per 200kHz RF channel in GSM [13,14] using a multiplexed TDMA 
system with 8 to 16 voice channels, and a mandatory equalizer with a high 
number of taps to overcome inter-symbol interference (ISI) (see Chapter 3). The 
United States used the carrier transmission rate of 48 kbps in 30 kHz channel, and 
selected digital advanced mobile phone (DAMP) systems (IS-54/IS-136) to reduce 
the computational requirements for equalization, and the CDMA system (IS-95) 
to avoid the need for equalization. In Japan the rate of 42 kbps in 25 kHz channel 
was used, and equalizers were made optional. 

Taking into account the limitations imposed by the finite amount of radio 
spectrum available, the focus of the third-generation (3G) mobile systems has been 
on the economy of network and radio transmission design to provide seamless ser- 
vice from the customers’ perspective. The third-generation systems provide their 
users with seamless access to the fixed data network [18,19]. They are perceived 
as the wireless extension of future fixed networks, as well as an integrated part of 
the fixed network infrastructure. 3G systems are intended to provide multimedia 
services including voice, data, and video. 

One major distinction of 3G systems relative to 2G systems is the hierar- 
chical cell structure designed to support a wide range of multimedia broadband 
services within the various cell types by using advanced transmission and protocol 
technologies. The 2G systems mainly use one-type cell and employ frequency 
reuse within adjacent cells in such a way that each single cell manages its own 
radio zone and radio circuit control within the mobile network, including traf- 
fic management and handoff procedures. The traffic supported in each cell is 
fixed because of frequency limitations and little flexibility of radio transmission 
which is mainly optimized for voice and low data rate transmissions. Increasing 
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traffic leads to costly cellular reconfiguration such as cell splitting and cell 
sectorization. 

The multilayer cell structure in 3G systems aims to overcome these problems 
by overlaying, discontinuously, pico- and microcells over the macrocell structure 
with wide area coverage. Global/satellite cells can be used in the same sense by 
providing area coverage where macrocell constellations are not economical to 
deploy and/or support long distance traffic. 

With low mobility and small delay spread profiles in picocells, high bit rates 
and high traffic densities can be supported with low complexity as opposed to 
low bit rates and low traffic load in macrocells that support high mobility. The 
user expectation will be for service selected in a uniform manner with consistent 
procedures, irrespective of whether the means of access to these services is fixed 
or mobile. Freedom of location and means of access will be facilitated by smart 
cards to allow customers to register on different terminals with varying capabili- 
ties (speech, multimedia, data, short messaging). 

The choice of a radio interface parameter set corresponding to a multiple access 
scheme is a critical issue in terms of spectral efficiency, taking into account the ever- 
increasing market demand for mobile communications and the fact that radio spec- 
trum is a very expensive and scarce resource. A comparative assessment of several 
different schemes was carried out in the framework of the Research in Advanced 
Communications Equipment (RACE) program. One possible solution is to use 
a hybrid CDMA/TDMA/FDMA technique by integrating advantages of each and 
meeting the varying requirements on channel capacity, traffic load, and transmission 
quality in different cellular/PCS layouts. Disadvantages of such hybrid access schemes 
are the high-complexity difficulties in achieving simplified low-power, low-cost trans- 
ceiver design as well as efficient flexibility management in the several cell layers. 

CDMA is the selected approach for 3G systems by the ETSI, ARIB (Associa- 
tion of Radio Industries and Business— Japan) and Telecommunications Industry 
Association (TIA). In Europe and Japan, Wideband CDMA (WCDMA/UMTS 
[Universal Mobile Telecommunication Services]) was selected to avoid 15-95 intel- 
lectual property rights. In North America, cdma2000 uses a CDMA air-interface 
based on the existing I$-95 standard to provide wireline quality voice service and 
high speed data services at 144 kbps for mobile users, 384 kbps for pedestrians, 
and 2Mbps for stationary users. The 64 kbps data capability of CDMA IS-95B 
provides high speed Internet access in a mobile environment, a capability that 
cannot be matched by other narrowband digital technologies. 

Mobile data rates up to 2 Mbps are possible using wide band CDMA technolo- 
gies. These services are provided without degrading the systems' voice transmission 
capabilities or requiring additional spectrum. This has tremendous implications for 
the majority of operators that are spectrum constrained. In the meantime, DSPs 
have improved in speed by an order of magnitude in each generation, from 4 MIPs 
(million instructions per second) through 40 MIPs to 400 MIPs. 
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Since the introduction of 2G systems, the base station has seen the introduction 
of features such as dynamic channel assignment. In addition, most base stations began 
making shared use of power amplifiers and linear amplifiers whether or not modula- 
tion was linear. As such there has been an increasing demand for high-efficiency, large 
linear power amplifiers instead of nonlinear amplifiers. 

At the beginning of 2G, users were fortunate if they were able to obtain a 
mobile device below 150 cc. Today, about 10 years later, mobile phone size has 
reached as low as 70 cc. Furthermore, the enormous increase in very large system 
integration (VLSI) and improved CPU performance has led to increased function- 
ality in the handset, setting the path toward becoming a small-scale computer. 


1.4 Road Map for Higher Data Rate Capability in 3G 

The first- and second-generation cellular systems were primarily designed for 
voice services and their data capabilities were limited. Wireless systems have since 
been evolving to provide broadband data rate capability as well. 

GSM is moving forward to develop cutting-edge, customer-focused solu- 
tions to meet the challenges of the 21st century and 3G mobile services. When 
GSM was first designed, no one could have predicted the dramatic growth of the 
Internet and the rising demand for multimedia services. These developments have 
brought about new challenges to the world of GSM. For GSM operators, the 
emphasis is now rapidly changing from that of instigating and driving the devel- 
opment of technology to fundamentally enable mobile data transmission to that 
of improving speed, quality, simplicity, coverage, and reliability in terms of tools 
and services that will boost mass market take-up. 

People are increasingly looking to gain access to information and services 
whenever they want from wherever they are. GSM will provide that connectivity. 
The combination of Internet access, web browsing, and the whole range of mobile 
multimedia capability is the major driver for development of higher data speed 
technologies. 

GSM operators have two nonexclusive options for evolving their networks 
to 3G wide band multimedia operation: (1) they can use General Packet Radio 
Service (GPRS) and Enhanced Data rates for GSM Evolution (EDGE) [also known 
as 2.5G] in the existing radio spectrum, and in small amounts of new spectrum; 
or (2) they can use WCDMA/UMTS in the new 2 GHz bands [12,15,16]. Both 
approaches offer a high degree of investment flexibility because roll-out can pro- 
ceed in line with market demand and there is extensive reuse of existing network 
equipment and radio sites. 

The first step to introduce high-speed circuit-switched data service in GSM 
is by using High Speed Circuit Switched Data (HSCSD). HSCSD is a feature that 
enables the co-allocation of multiple full rate traffic channels (TCH/F) of GSM 
into an HSCSD configuration. The aim of HSCSD is to provide a mixture of 
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services with different user data rates using a single physical layer structure. The 
available capacity of an HSCSD configuration is several times the capacity of a 
TCH/E leading to a significant enhancement in data transfer capability. 

Ushering faster data rates into the mainstream is the new speed of 14.4 kbps 
per time slot and HSCSD protocols that approach wire-line access rates of up to 
57.6kbps by using multiple 14.4 kbps time slots. The increase from the current 
baseline 9.6 kbps to 14.4 kbps is due to a nominal reduction in the error-correction 
overhead of the GSM radio link protocol, allowing the use of a higher data rate. 

The next phase in the high speed road map is the evolution of current short 
message service (SMS), such as smart messaging and unstructured supplementary 
service data, toward the new GPRS, a packet data service using TCP/IP and X.25 
to offer speeds up to 115.2 kbps. GPRS has been standardized to optimally sup- 
port a wide range of applications ranging from very frequent transmissions of 
medium to large data volume. Services of GPRS have been developed to reduce 
connection set-up time and allow an optimum usage of radio resources. GPRS 
provides a packet data service for GSM where time slots on the air interface can 
be assigned to GPRS over which packet data from several mobile stations can be 
multiplexed. 

A similar evolution strategy, also adopting GPRS, has been developed for 
DAMPS (IS-136). For operators planning to offer wide band multimedia services, 
the move to GPRS packet-based data bearer service is significant; it is a relatively 
small step compared to building a totally new 3G network. Use of the GPRS 
network architecture for IS-136 packet data service enables data subscription 
roaming with GSM networks around the globe that support GPRS and its evolu- 
tion. The IS-136 packet data service standard is known as GPRS-136. GPRS-136 
provides the same capabilities as GSM GPRS. The user can access either X.25 or 
IP-based data networks. 

GPRS provides a core network platform for current GSM operators not 
only to expand the wireless data market in preparation for the introduction of 
3G services, but also a platform on which to build UMTS frequencies should they 
acquire them. 

GPRS enhances GSM data services significantly by providing end-to-end 
packet switched data connections. This is particularly efficient in Internet/intranet 
traffic, where short bursts of intense data communications actively are inter- 
spersed with relatively long periods of inactivity. Since there is no real end-to-end 
connection to be established, setting up a GPRS call is almost instantaneous and 
users can be continuously on-line. Users have the additional benefits of paying for 
the actual data transmitted, rather than for connection time. 

Because GPRS does not require any dedicated end-to-end connection, it only 
uses network resources and bandwidth when data is actually being transmitted. 
This means that a given amount of radio bandwidth can be shared efficiently 
between many users simultaneously. 


10 1 An Overview of Wireless Systems 


The significance of EDGE (also referred to as 2.5G system) for today’s GSM 
operators is that it increases data rates up to 384 kbps and potentially even higher in 
good quality radio environments that are using current GSM spectrum and carrier 
structures more efficiently. EDGE will both complement and be an alternative to 
new WCDMA coverage. EDGE will also have the effect of unifying the GSM, 
DAMPS, and WCDMA services through the use of dual-mode terminals. 

GSM operators who win licenses in new 2GHz bands will be able to 
introduce UMTS wideband coverage in areas where early demand is likely to be 
greatest. Dual-mode EDGE/ UMTS mobile terminals will allow full roaming and 
handoff from one system to the other, with mapping of services between the two 
systems. EDGE will contribute to the commercial success of the 3G system in the 
vital early phases by ensuring that UMTS subscribers will be able to enjoy roam- 
ing and interworking globally. 

While GPRS and EDGE require new functionality in the GSM network with 
new types of connections to external packet data networks, they are essentially 
extensions of GSM. Moving to a GSM/UMTS core network will likewise be a 
further extension of this network. 

EDGE provides GSM operators— whether or not they get a new ЗС license— with 
a commercially attractive solution for developing the market for wide band multime- 
dia services. Using familiar interfaces such as the Internet, volume-based charging and 
a progressive increase in available user data rates will remove some of the barriers to 
large-scale take-up of wireless data services. The move to 3G services will be a staged 
evolution from today’s GSM data services using GPRS and EDGE. Table 1.1 provides 
a comparison of GSM data services. 


Table 1.1 Comparison of GSM data services. 


Max. sustained 


Service type Data unit user data rate Technology Resources used 
Short Message Single 140 9bps simplex SDCCH or 
Service (SMS) Octet packet circuit SACCH 
Circuit- 30 octet 9.6kbps duplex TCH 
Switched Data frames circuits 
HSCSD 192 octet 115kbps duplex 1-8 TCH 
frames circuits 
GPRS 1600 octet 115kbps virtual cir- PDCH 
frames cuit packet (1-8 TCH) 
switching 
EDGE (2.5G) variable 384 kbps virtual cir- 1-8 TCH 
cuit/ packet 
switching 


Note: SDCCH: Stand-alone Dedicated Control Channel; SACCH: Slow Associated Control Channel; 
TCH: Traffic Channel; PDCH: Packet Data Channel (all refer to GSM logical channels) 
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The use of CDMA technology began in the United States with the development 
of the IS-95 standard in 1990. The IS-95 standard has evolved since to provide 
better voice services and applications to other frequency bands (IS-95A), and to 
provide higher data rates (up to 115.2kbps) for data services (IS-95B). To fur- 
ther improve the voice service capability and provide even higher data rates for 
packet and circuit switched data services, the industry developed the cdma2000 
standard in 2000. As the concept of wireless Internet gradually turns into real- 
ity, the need for an efficient high-speed data system arises. A CDMA high data 
rate (HDR) system was developed by Qualcomm. The CDMA-HDR (now called 
3G 1X EV-DO, [3G 1X Enhanced Version Data Only]) system design improves 
the system throughput by using fast channel estimation feedback, dual receiver 
antenna diversity, and scheduling algorithms that take advantage of multi-user 
diversity. 3G 1X EV-DO has significant improvements in the downlink structure 
of cdma2000 including adaptive modulation of up to 8-PSK and 16-quadrature 
amplitude modulation (QAM), automatic repeat request (ARQ) algorithms and 
turbo coding. With these enhancements, 3G 1X EV-DO can transmit data in burst 
rates as high as 2.4 Mbps with 0.5 to 1 Mbps realistic downlink rates for indi- 
vidual users. The uplink design is similar to that in cdma2000. Recently, the 3G 
1X EV-Data and Voice (DV) standard was finalized by the TIA and commercial 
equipment is currently being developed for its deployment. 3G 1X EV-DV can 
transmit both voice and data traffic on the same carrier with peak data through- 
put for the downlink being confirmed at 3.09 Mbps. 

As an alternative, Time Division-Synchronous CDMA (TD-SCDMA) has been 
developed by Siemens and the Chinese government. TD-SCDMA uses adaptive mod- 
ulation of up to quadrature phase shift keying (QPSK) and 8-PSK, as well as turbo 
coding to obtain downlink data throughput of up to 2Mbps. TD-SCDMA uses a 
1.6 MHz time-division duplex (TDD) carrier whereas cdma2000 uses a 2 X 1.25 MHz 
frequency-division duplex (FDD) carrier (2.5 MHz total). TDD allows TD-SCDMA 
to use the least amount of spectrum of any 3G technologies. 

Table 1.2 lists the maximum data rates per user that can be achieved by vari- 
ous systems under ideal conditions. When the number of users increases, and if all 
the users share the same carrier, the data rate per user will decrease. 

One of the objectives of 3G systems is to provide access “anywhere, any 
time.” However, cellular networks can only cover a limited area due to high 
infrastructure costs. For this reason, satellite systems will form an integral part 
of the 3G networks. Satellite will provide extended wireless coverage to remote 
areas and to aeronautical and maritime mobiles. The level of integration of the 
satellite system with the terrestrial cellular networks is under investigation. A fully 
integrated solution will require mobiles to be dual mode terminals to allow com- 
munications with orbiting satellite and terrestrial cellular networks. Low Earth 
orbit (LEO) satellites are the most likely candidates for providing worldwide 
coverage. Currently several LEO satellite systems are being deployed to provide 
global telecommunications. 


Table 1.2 Network technology migration paths and their associated data rates. 


Technology 


Analog 
CDPD (1G) 


GSM Circuit 
Switched Data (2G) 


GPRS 


EDGE (2.5G) 
WCDMA (3G) 


IS-54/IS-136 TDMA 
Circuit Switched 
Data (2G) 


EDGE (2.5G) for 
North American 
TDMA system 


Carrier width 
(MHz) 


0.20 


0.20 


0.20 
5.00 


0.03 


0.20 


Duplexing 


FDD 


FDD 


FDD 
FDD 


FDD 


FDD 


Multiplexing 


TDMA 


TDMA 


TDMA 
CDMA 


TDMA 


TDMA 


Modulation 


GMSK 


GMSK 


GMSK, 8-PSK 
OPSK 


OPSK 


GMSK, 8-PSK 


Max. data 
rates 
9.6 kbps 
19.2 kbps 
9.6-14.4 kbps 


up to 
115.2kbps 
(8 channels) 
384 kbps 


2Mbps 
(stationary); 
384 kbps 
(mobile) 


14.4 kbps 


64kbps uplink 
(initial roll out) 


384 kbps 


End-user 
data rates 


4.8-9.6kbps 


about 16kbps 
about 12kbps 


10-56 kbps 


about 144kbps 


50 kbps uplink; 
150-200 kbps 
downlink 


about 10kbps 


Initial roll out 

in 2001/2002: 
45-50 kbps 

uplink; 80-90 kbps 
downlink 

2003: 45-50 kbps 


uplink; 150-200 kbps 
downlink 


cdma2000 (3G) 1X 


3G 1X EV-DO 
(data only) 


3G 1X EV-DV 
(data and voice) 


TD-SCDMA 


1.25 


1.25 


1.25 


1.60 


FDD 


FDD 


FDD 


TDD 


CDMA 


TD-CDMA 


TD-CDMA 


TD-CDMA 


QPSK 


OPSK, 8-PSK, 
16-OAM 


QPSK, 8-PSK, 
16-OAM 


OPSK, 8-PSK 


153 kbps 


2.4Mbps 


3-5 Mbps 


2 Mbps 


90-130 kbps 
(depending on the 
number of users and 
distance from BS) 


700 kbps 


>1Mbps 


1.333 Mbps 


Note: FDD = Frequency Division Duplex; TDD = Time Division Duplex; PSK = Phase Shift Keying; QPSK = Quadrature Phase Shift Keying; 
GMSK = Gaussian Minimum Shift Keying; QAM = Quadrature Amplitude Modulation 
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1.5 Wireless 4G Systems 

4G networks (see Chapter 23) can be defined as wireless ad hoc peer-to-peer 
networking with high usability and global roaming, distributed computing, per- 
sonalization, and multimedia support. 4G networks will use distributed architec- 
ture and end-to-end Internet Protocol (IP). Every device will be both a transceiver 
and a router for other devices in the network eliminating the spoke-and-hub 
architecture weakness of 3G cellular systems. Network coverage/capacity will 
dynamically change to accommodate changing user patterns. Users will automati- 
cally move away from congested routes to allow the network to dynamically and 
automatically self-balance. 

Recently, several wireless broadband technologies [20] have emerged to 
achieve high data rates and quality of service. Navini Networks developed a wire- 
less broadband system based on TD-SCDMA. The system, named Ripwave, uses 
beamforming to allow multiple subscribers in different parts of a sector to simul- 
taneously use the majority of the spectrum bandwidth. Beamforming allows the 
spectrum to be effectively reused in dense environments without having to use 
excessive sectors. The Ripwave system varies between QPSK, 16 and 64-QAM, 
which allows the system to burst up to 9.6Mbps using a single 1.6 MHz TDD 
carrier. Due to TDD and 64-QAM modulation the Ripwave system is extremely 
spectrally efficient. Currently Ripwave is being tried by several telecom operators 
in the United States. The Ripwave Customer Premise Equipment is about the size 
of a cable modem and has a self-contained antenna. Recently, PC cards for lap- 
tops have become available allowing greater portability for the user. 

Flarion Technologies is promoting their proprietary Flash-orthogonal 
frequency-division multiple (OFDM) as a high-speed wireless broadband solution. 
Flash-OFDM uses frequency hopping spread spectrum (FHSS) to limit interfer- 
ence and allows a reuse pattern of one in an OFDM access environment. Flarion’s 
Flash-OFDM system uses 1.25 MHz FDD carriers with QPSK and 16-QAM mod- 
ulation. Peak speeds can burst up to 3.2 Mbps with sustained rates leveling off at 
1.6 Mbps on the downlink. Flarion has not implemented an antenna enhancement 
technology that may further improve data rates. 

BeamReach is a wireless broadband technology based on OFDM and beam- 
forming. It uses TDD duplexed 1.25 MHz paired carriers. Spread spectrum is used 
to reduce interference over the 2.5 MHz carriers allowing a frequency reuse of 
one. Individual users can expect downlink rates of 1.5, 1.2, and 0.8 Mbps using 
32-QAM, 16-QAM, and 8-PSK modulation respectively. The aggregate network 
bandwidth is claimed to be 88 Mbps in 10 MHz of spectrum or 220 Mbps in 
24 MHz of spectrum, which equates to a high spectral efficiency of 9 bps/Hz. It 
should be noted that the system uses either 4 or 6 sectors and these claims are 
based on those sectoring schemes. For any technology with a reuse number of 1 
to achieve 9 bps/Hz per cell with 4 or 6 sectors, the efficiency in each sector would 
need to be a reasonable 2.3 or 1.5 bps/Hz, respectively. 
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IPWireless is the broadband technology based upon UMTS. It uses either 
5 or 10 MHz TDD carriers and QPSK modulation. The theoretical peak transmis- 
sion speeds for a 10 MHz deployment is 6 Mbps downlink and 3 Mbps uplink. 
The IPWireless system only uses QPSK modulation and no advanced antenna 
technologies. With the inclusion of advanced antenna technologies and the devel- 
opment of High Speed Downlink Packet Access (HSDPA), IP Wireless has signifi- 
cant potential. 

SOMA networks has also developed a wireless broadband technology based 
on UMTS. Like UMTS, SOMA’s technology uses 5 MHz FHSS carriers. Peak 
throughput is claimed to be as high as 12 Mbps, making SOMA one of the faster 
wireless broadband technologies. Table 1.3 compares the wireless broadband 
technologies and their lowest order modulation data throughput. 


1.6 Future Wireless Networks 
As mobile networks evolve to offer both circuit and packet-switched services, users 
will be connected permanently (always on) via their personal terminal of choice to 
the network. With the development of intelligence in core network (CN), both voice 
and broadband multimedia traffic will be directed to their intended destination with 
reduced latency and delays. Transmission speeds will be increased and there will 
be far more efficient use of network bandwidth and resources. As the number of 
IP-based mobile applications grows, 3G systems will offer the most flexible access 
technology because it allows for mobile, office, and residential use in a wide range 
of public and nonpublic networks. The 3G systems will support both IP and non-IP 
traffic in a variety of modes, including packet, circuit-switched, and virtual circuit, 
and will thus benefit directly from the development and extension of IP standards 
for mobile communications. New developments will allow parameters like quality 
of service (QoS), data rate, and bit error rate (BER) — vital for mobile operation—to 
be set by the operator and/or service provider. 

Wireless systems beyond 3G (e.g., 4G) will consist of a layered combination 
of different access technologies: 


* Cellular systems (e.g., existing 2G and 3G systems for wide area mobility) 

e WLANs for dedicated indoor applications (such as IEEE 802.112, 802.11b, 
802.11g) 

* Worldwide interoperability for microwave access (WiMAX) (IEEE 802.16) 
for metropolitan areas 

e WPANS for short-range and low mobility applications around a room in the 
office or at home (such as Bluetooth) 


These access systems will be connected via a common IP-based core network 
that will also handle interworking between the different systems. The core network 
will enable inter- and intra-access handoff. 


Table 1.3 Non-line of sight (LOS) wireless broadband technologies. 


System System Avg. DL 
Carrier DL Peak DL LOM efficiency 
Developer Technology Multiplexing Duplexing (MHz) Modulation (Mbps) (Mbps) (bps/Hz) 
Navini TD-SCDMA TD-CDMA TDD 1.6 QPSK to 8.0 2.0 2.5 
64-OAM 
IPwireless TD-WCDMA TD-CDMA TDD 5.0 OPSK 3.0 3.0 1.2 
Flarion Flash-OFDM FHSS OFDM FDD 1.25 QPSK, 3.2 1.6 1.28 
16-OAM 
SOMA UMTS CDMA FDD 5.0 QPSK, 12.0 6.0 1.2 
16-OAM 
Beam Reach AB-OFDM DSSS-OFDM TDD 2.5 8-PSK, 16-, 3.33 2.0 1.6 
32-OAM 


TDD carriers need one carrier for Tx and Rx, thus efficiency is doubled; BeamReach system throughput includes 6 sectors, thus it was divided by six; 
ГОМ — sustained system throughput estimated using lowest order modulation 
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The peak data rates of 3G systems are around 10 times more than 2G/2.5G 
systems. The fourth-generation systems may be expected to provide a data rate 
10 times higher than 3G systems. User data rates of 2Mbps for vehicular and 
20 Mbps for indoor applications are expected. The fourth-generation systems will 
also meet the requirements of next generation Internet through compliance with 
IPv6, Mobile IP, QoS control, and so on. 


1.7 Standardization Activities for Cellular Systems 

The standardization activities for PCS in North America were carried out by 
the joint technical committee (JTC) on wireless access, consisting of appropriate 
groups from within the T1 committee, a unit of the Alliance for Telecommuni- 
cations Industry Solutions (ATIS), and the engineering committee TR46, a unit 
of the Telecommunications Industry Association (TIA). The JTC was formed in 
November of 1992, and its first assignment was to develop a set of criteria for 
PCS air interfaces. The JTC established seven technical ad hoc groups (TAGs) in 
March of 1994, one for each of the selected air interface proposals. The TAGs 
drafted the specifications document for the respective air interface technologies 
and conducted validation and verification to ensure consistency with the crite- 
ria established by the JTC. This was followed by balloting on each of the stan- 
dards. After the balloting process, four of the proposed standards were adopted as 
ANSI standards: IS-136-based PCS, IS-95-based PCS, GSM 1900 (a derivative of 
GSM) and Personal Access Communication System (PACS). Two of the proposed 
standards— composite CDMA/TDMA and Oki’s wide band CDMA — were 
adopted as trial use standards by ATIS and interim standards by TIA. The Per- 
sonal Wireless Telecommunications-Enhanced (PWT-E) standard was moved from 
JTC to TR 46.1 which, after a ballot process, was adopted in March of 1996. 
Table 1.4 provides a comparison of seven technologies using a set of parameters 
which include access methods, duplex methods, bandwidth per channel, through- 
put per channel, maximum power output per subscriber unit, vocoder, and mini- 
mum and maximum cell ranges. 

The 3G systems were standardized under the umbrella of the International 
Telecommunications Union (ITU). The main proposals to the ITU International 
Mobile Telecommunications-2000 (IMT-2000) are: ETSI UMTS Terrestrial Radio 
Access (UTRA), ARIB WCDMA, TIA cdma2000, and TD-SCDMA. These third- 
generation systems will provide the necessary quality for multimedia communica- 
tions. The IMT-2000 requirements аге: 384 kbps for full area coverage (144 kbps for 
fast-moving vehicles between 120km per hour and 500 km per hour), and 2 Mbps 
for local coverage. It is, therefore, important to use packet-switched data service to 
dynamically allocate and release resources based on the current needs of each user. 

The ETSI agreed on a WCDMA solution using FDD mode. In Japan, a 
WCDMA solution was adopted for both TDD and FDD modes. In Korea, two 


Table 1.4 Technical characteristics of North American PCS standards. 


Standard 


Access 


Duplex Method 


Frequency Reuse 


Bandwidth/channel 


Throughput/ 
channel (kb/s) 


Max. Power/subscriber 
unit 


Vocoder 


Max. Cell Range (km) 
Min. Cell Range (km) 


TAG-1 


Composite 
CDMA/ 
TDMA 


CDMA/ 
TDMA/ 
FDMA 


TDD 
3 


2.5/5 MHz 


600 mW 


PHS HCA 


10.0 
0.1 


TAG-2 


15-95 
based PCS 


CDMA 


1.25 MHz 


8.55/13.3 


200 mW 


CELP 


50.0 
0.05 


TAG-3 


PACS 


TDMA 


FDD 


16 x 1 


300 kHz 


32 


200 mW 


ADPCM 


1.6 
0-1 


TAG-4 


IS-136 
based PCS 


TDMA 


600 mW 


VCELP/ 
ACELP 


20.0 
0.5 


TAG-5 


GSM 1900 


TDMA 


FDD 


7x1,3x3 


200kHz 


13 


0.5-2.0 W 


RPE-LTE 


ACELP 


35.0 
0.5 


TAG-6 


PWT-E 


TDMA 


TDD 
Portable 


selected 


1kHz 


32 


500 mW 


ADPCM 


0.15 
0.01 


1.8 Summary 19 


different types of CDMA solutions were proposed—one based on WCDMA 
similar to that of Europe and Japan and the other similar to the cdma2000 pro- 
posed in North America. 

A number of groups working on similar technologies pooled their resources. 
This led to the creation of two standards groups—the third-generation part- 
nership project (3GPP) and 3GPP2. 3GPP works on UMTS, which is based on 
WCDMA and 3GPP2 works on cdma2000. 

The IEEE standard committee 802.11 is responsible for the WLAN 
standard. There are two IEEE standards committees that are involved in certi- 
fication of wireless broadband technologies. The 802.16x committee focuses 
on the wireless metropolitan area network (WMAN) using CDMA and OFDM 
technologies. 802.16x allows for portability and data rates above 1Mbps. The 
newly formed IEEE 802.20 committee, evolved from the 802.16e committee, 
focuses on mobile wide area network (MWAN). Several key performance require- 
ments include megabit data rates and mobile handoff at speeds of up to 250km 
per hour. 

The Worldwide Interoperability for Microwave Access (WiMAX) Forum 
is a nonprofit organization formed by equipment and component suppliers to 
promote the adoption of IEEE 802.16-compliant equipment by operators of 
broadband wireless access systems. The organization is working to facilitate the 
deployment of broadband wireless networks based on JEEE 802.16 standards by 
helping to ensure the compatibility and interoperability of broadband wireless 
access equipment. 


1.8 Summary 

In this chapter, we presented the scope of wireless networks and gave an overview. 
We briefly discussed 1G, 2G/2.5G, and 3G cellular systems. The advantage of 
wireless data networking is apparent. Wireless data network users are not con- 
fined to the locations of “wired” data jacks, and enjoy connectivity that is less 
restrictive and therefore well suited to meet the needs of today’s mobile users. 
Wireless network deployment in three service classifications — wireless personal 
access network (WPAN), wireless local area network (WLAN), and wireless wide 
area network (WWAN)— was discussed. Today, the core technology behind the 
wireless service in each of these service classifications is unique and, more impor- 
tant, not an inherently integrated seamless networking strategy. As an example, a 
user of a personal digital assistant (PDA), such as a PALM (XXX) connecting to 
the Internet via a WWAN service provider will not be able to directly connect to a 
WLAN service. Simply stated, they are different services, with different hardware 
requirements, and have fundamentally different service limitations. In the future, 
wireless networks have to evolve to provide interoperability of WPAN, WLAN, 
and WWAN systems. 
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Problems 


1.1 Name the wireless access techniques used in 1G, 2G, and 3G wireless 
systems. 


1.2 What are the three classes of wireless data networking? 

1.3 Define the roles of WPAN technology in wireless data networking. 
1.4 List the main features of 3G systems. 

1.5 What is the role of GPRS in enhancing 2G GSM systems? 

1.6 Show how CDMA IS-95 systems are moving to provide 3G services. 
1.7 Show how 2G GSM systems are moving to achieve 3G services. 

1.8 "What are the data rate requirements for 3G systems? 

1.9 Define IPWireless technology. 


1.10 What are the goals of 4G systems? 
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CHAPTER 2 


Teletraffic Engineering 


2.1 Introduction 

There are many telephone customers, much larger than the number of available 
trunks, but not every customer makes or receives a telephone call at the same time. 
The number of trunks connecting the Mobile Switching Center (MSC) A with 
another MSC B are the number of voice pairs used in the connection. One of the 
most important steps in telecommunication engineering is to determine the num- 
ber of trunks required on a route or a connection between MSCs. To dimension a 
route correctly, we must have some idea of its usage, that is, how many subscrib- 
ers are expected to talk at one time over the route. The usage of a transmission 
route or an MSC brings us into the realm of teletraffic engineering. 

The call capacity of an MSC is expressed as the maximum number of 
originating plus incoming (O + I) calls that can be handled during a high-traffic 
hour while meeting the dial-tone delay requirements. The call capacity of an MSC 
depends on the subscriber call mix, feature mix, and equipment configuration. 
Typically, processor capacity limits the MSC call capacity under specific condi- 
tions, but the switching networking, peripheral equipment, trunk terminations, 
or directory numbers can limit MSC call capacity as well. The call volume offered 
to an MSC depends on geographical area, class of service mix, and time of day. 
An MSC is required to process calls while serving a representative supplementary 
feature (such as call waiting, call forwarding, etc.). The call capacity of an MSC 
is needed to plan, engineer, and administer its use. 

Inthischapter we provide definitions of the terms used in teletraffic engineering. 
We include several numerical examples for calculating traffic. In the latter part 
of the chapter we focus on the Erlang and Poisson blocking formulas used to 
calculate the grade of service (GoS) and show their applications in teletraffic engi- 
neering. The readers interested in derivation of the blocking formulas should refer 
to queuing books [2,4,5]. Typical call mixes for systems in different environments 
are also given. The material in this chapter applies to both wireline and wireless 
systems. 


2.2 Service Level 


Service level for telecommunication traffic can be divided into two main areas: 
the delay in receiving a dial tone (for a mobile system, radio signaling delays 
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contribute to dial-tone delay) and the probability of service denial. Dial-tone 
delay is the maximum amount of time a subscriber must wait to hear a dial- 
tone after removing the handset from the hook. Dial-tone delay has the following 
characteristics: 


* À large number of users compete for a small number of servers (dial-tone 
connections, dial-tone generators). 


* An assumption that the user will wait until a server is available. 


Service denial, or the probability that the service trunk will not be available, 
is similar to dial-tone delay, with several additional characteristics: 


* A large number of users compete for a small number of trunks. 


* An assumption that no delay will be encountered. The user is either given 
access to a trunk or is advised by a busy signal or a recording that none are 
available. 


* The user may frequently reinstate the call attempt after receiving a busy 
signal. 


For both cases, the basic measure of performance is either the probability 
that service delay will exceed some specified value or the probability that the call 
will be denied or blocked (the blocking probability). In a system that drops calls 
when serving trunks are not available (a loss system), the blocking probability 
represents the performance measure. 


2.3 Traffic Usage 
A traffic path is a communication channel, time slot, frequency band, line, 
trunk, switch, or circuit over which individual communications take place in 
sequence. 
Traffic usage is defined by two parameters, calling rate and call bolding 
time [6]. 
Calling rate, or the number of times a route or traffic path is used per unit 
time; more properly defined, the call intensity (i.e., calls per hour) per traf- 
fic path during busy hour. 
Call holding time, or the average duration of occupancy of a traffic path 
by a call. 


The carried traffic is the volume of traffic actually carried by a switch, and 
offered traffic is the volume of traffic offered to a switch. The offered load is 
the sum of the carried load and overflow (traffic that cannot be handled by the 
switch). 


Offered load = carried load + overflow (2.1) 
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No. of 
Calls (K) 


Time of Day (Hour) 


Figure 2.1 Example of voice traffic variation hour by hour. 


Figure 2.1 shows a typical hour-by-hour voice traffic variation for an MSC. We 
notice that the busiest period —the busy hour (BH) is between 10 A.M. and 11 A.M. 
We define the busy hour as the span of time (not necessarily a clock hour) that has 
the highest average traffic load for the business day throughout the busy season. The 
peak hour is defined as the clock hour with highest traffic load for a single day. 

Since traffic also varies from month to month, we define the average busy 
season (ABS) as the three months (not necessarily consecutive) with the highest 
average BH traffic load per access line. Telephone systems are not engineered for 
maximum peak loads, but for some typical BH load. The blocking probability is 
defined as the average ratio of blocked calls to total calls and is referred to as the 
GoS. 


Example 2.1 


If there are 380 seizures (lines connected for service) and 10 blocked calls (lost 
calls) during the BH, what is the GoS? 


Solution 
Blocking Probability = (Number of lost calls)/(Total number of offered calls) 


"UM _1 
380-10 39 


GoS 


2.4 Traffic Measurement Units 
Traffic is measured in either Erlangs, percentage of occupancy, centrum (100) call 
seconds (CCS), or peg count [1]. 
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Traffic intensity is the average number of calls simultaneously in progress 
during a particular period of time. It is measured either in units of Erlangs or CCS. 
An average of one call in progress during an hour represents a traffic intensity of 
1 Erlang; thus 1 Erlang equals 1 X 3600 call seconds (36 CCS). The Erlang is a 
dimensionless number. Traffic intensity can be obtained as: 


(the sum of circuit holding time) 


Traffic Intensity = 2:2. 
оа (the duration of monitoring period) (22) 
Ne 
ti x 
I ёи = 23 
T T nd (2.3) 


where: 
I = traffic intensity 
T = duration of monitoring period 
ti = the holding time of the ith individual call 
М, = the total number of calls in monitoring period 
t average holding time 
n. — number of calls per unit time 


Percentage of occupancy. Percentage of time a server is busy. 
Peg count. The number of attempts to use a piece of equipment. 


The usage (U), peg count (PC) per time period, overflow (O) per period, and 
average holding time t are related as: 


U - (PC- О) • (2.4) 


Example 2.2 

In a switching office an equipment component with an average holding time of 
5 seconds has a peg count of 450 for a one-hour period. Assuming that there was 
no overflow (i.e., the system handled all calls), how much usage in call-seconds, 
CCS, and Erlangs has accumulated on the piece of the equipment? 


Solution 


5 
= — x = (), 
О = (450 — 0) 3600 0.625 Erlangs 


0.625 Erlangs X 36 CCS/Erlangs = 22.5 CCS = 2250 call-seconds 
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Example 2.3 
If the carried load for a component is 3000 CCS at 5% blocking, what is the 
offered load? 


Solution 


= 3000. 2 
Offered load = ü- 0.05) 3158 CCS 


Overflow = (Offered load) — (Carried load) = 3158 — 3000 = 158 CCS 


Example 2.4 


In a wireless network each subscriber generates two calls per hour on the average 
and a typical call holding time is 120 seconds. What is the traffic intensity? 


Solution 


_2х120_ E 
I= 2100 0.0667 Erlangs = 2.4 CCS 
Example 2.5 
In order to determine voice traffic on a line, we collected the following data dur- 


ing a period of 90 minutes (refer to Table 2.1). Calculate the traffic intensity in 
Erlangs and CCS. 


Table 2.1 Traffic data used to estimate traffic intensity. 


Call no. Duration of call (s) 


60 
74 
80 
90 
92 
70 
96 
48 
64 

126 


о ON OO ь ым = 


= 
о 
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Solution 
Call arrival rate = m = 6.667 calls/hour 
Average call holding time: 


ВОНО + 90+ 972, E TOFI RAR ез 120) = 80 seconds per call 


_ 6.667 х 80 _ т 
І TOS 0.148 Erlangs = 5.33 CCS 


Example 2.6 

We record data in Table 2.2 by observing the activity of a single customer line 
during an eight-hour period from 9:00 A.M. to 5:00 р.м. Find the traffic intensity 
during the eight-hour period, and during busy hour (which occurs between 
4:00 р.м. and 5:00 P.M). 

Solution 


Call arrival rate — ы = 1.375 calls/hour 


Total call minutes = 3 + 10 +7+104+5+5+4+1+5+4+15 + 34 + 5 = 100 minutes 


Table 2.2 Traffic on customer line between 9:00 a.m. and 5:00 р.м. 


Call no. Call started Call ended Call duration (min.) 
1 9:15 9:18 3.0 
2 9:31 9:41 10.0 
3 10:17 10:24 7.0 
4 10:24 10:34 10.0 
5 10:37 10:42 5.0 
6 10:55 11:00 5.0 
7 12:01 12:02 1.0 
8 2:09 2:14 5.0 
9 3:15 3:30 15.0 
10 4:01 4:35 34.0 


4:38 4:43 5.0 


= 
= 
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If statistical stationary condition is assumed, then the calling rate and average 
holding time could be converted to a one-hour period, with the same result holding 
for the offered traffic load. That is: 


7-100, 1 . 
t= 1 x TT 0.1515 hours/call 


The traffic intensity is: 
I = 1.375 X 0.1515 = 0.208 Erlangs = 7.5 CCS 


The BH is between 4:00 р.м. and 5:00 р.м. Since there are only two calls 
between this period, we can write: 


Call arrival rate — 2 calls/hour 


The average call holding time during BH: 


(34 + 5) 
2. 


t= = 19.5 minutes/call = 0.325 hours/call 


The traffic load during BH is: 
I = 2 х 0.325 = 0.65 Erlangs = 23.4 CCS 


Example 2.7 


The average mobile user has 500 minutes of use per month; 90% of traffic occurs 
during work days (i.e., only 10% of traffic occurs on weekends). There are 
20 work days per month. Assuming that in a given day, 10% of traffic occurs 
during the BH, determine the traffic per subscriber per BH in Erlangs. 


Solution 
Average busy hour usage per subscriber — (minutes of use/month) X (fraction 
during work day) X (percentage in busy hour)/(work days/month) 


Average busy hour usage per subscriber = 500 X 0.9 x 0.1/20 = 2.25 minutes 
of use per subscriber per busy hour. 


Traffic per subscriber — T — 0.0375 Erlangs 


Example 2.8 


If the mean holding time in Example 2.7 is 100 seconds, find the average number 
of busy hour call attempts (BHCAs). 
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Solution 


BHCAs = (traffic in Erlangs) х 3600/(mean holding time in seconds) 


0.0375 x 3600 
= = 1. 
00 35 


2.5 Call Capacity 

Call capacity is defined with respect to a view of the mobile switching center 
(MSC). In general there are two approaches to view the system — global view and 
component view [7]. 


Global view. The entire MSC is considered to be a single unit. Each request 
to the MSC for service is counted as an attempt. This approach is applicable 
to central processors involved in call processing. In the global view, the call 
volume of interest is expressed as the sum of the originating and incoming 


(O + I) calls. 
1. Originating call (O) includes the following: 


e Partial dial calls—calls with partial time-outs and abandons 


* [ntra-office calls —all calls that originate from and terminate to the same 
switch 


e Outgoing calls —all calls that originate from a line on the switch but 
terminate to a line on a different switch 


2. Incoming call (I) includes the following: 


e [ncoming-terminating calls —all calls that terminate to a line on the 
switch but originate from a different switch 


* Tandem calls — trunk-to-trunk calls that are routed through the switch 
* Direct inward dialing (DID)— calls to a PBX system 


Component view. The component of interest is considered a subsystem. Each 
request to the component for service is counted as an attempt. This view 
applies to principal processors involved in call processing. In the component 
view, the call volume of interest is expressed as the sum of the originating + 
terminating (O + T) half-calls 


1. Originating balf-calls. One originating half-call is for each originating 
call, because two peripheral equipment connections are required for a 
completed call. If the component serves both lines and trunks, incoming 
and outgoing half-calls are added to the total half-call volume. 


2. Terminating balf-calls. One terminating half-call is for each incoming- 
terminating call and each interoffice call. 
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Call Attempts - 
— esas) 


Figure 2.2 Call types in a telephone switch. 


Itshould be noted that false starts and permanent signals (ineffective attempts) 
are not counted as calls in either case. However, partial dial attempts, attempts 
receiving busy treatment, and attempts not answered are all considered calls. 

The primary determinant of a stored program control system's call handling 
capacity is the maximum number of calls per hour that the processor can handle 
while still meeting service criteria. Central processors have high day busy hour (O + I) 
call capacities, whereas peripheral processors have high day busy hour (O + T) call 
capacities. 

We define the following call types (see Figure 2.2): 


* Originating call (O). A call placed by a subscriber of the office 


Terminating call (T). A call received by a subscriber of the office 


Outgoing call. A call going out of the office 


Incoming call (I). A call coming into the office from another MSC 


Intra-office call. A call that originates from and terminates to the same MSC 


Tandem calls. Calls that come in on a trunk from another MSC and go out 
over a trunk to a different MSC 


(O + T). The measure of traffic load on the line side of the MSC both from 
within the office and from other offices 


(O + I). The measure of incoming trunk-circuit traffic load and traffic load 
on the MSC 


Bell Communication Research (Bellcore) [1] suggests the use of standard call 
mixes given in Tables 2.3 and 2.4 for calculating call capacity of central processors 
(in terms of (O + I) calls) and peripheral processors (in terms of (O + T) half-calls), 
respectively. These call mixes do not represent the best and worst case scenarios for 
call capacity, but they do represent the average or typical case for each environment. 
These call mixes reflect the differences found in the following traffic environments: 


Metropolitan (metro). Class 5 office in a major metropolitan area with a 
high proportion of business office traffic. 


Single system city. Class 4 or 5 office serving a medium-sized town with a 
number of outlying community dial offices homing into it. 
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Table 2.3 Standard call mixes for central processors (percentage of traffic). 


Traffic environments 


Type Metro SSC Suburban 
Ineffective 

False Start 10 12 18 

Permanent Signal 1 2 2 
Partial Dial 

Abandon 3 4 5 

Time-out 1 1 1 
Intra office 

Answered 12 24 17 

No Answer 2 2 3 

Busy 2 4 4 
Outgoing 

Answered 34 17 28 

No Answer 5 3 4 

Busy 5 3 5 
Incoming-Terminating 

Answered 27 18 24 

No Answer 5 2 5 

Busy 4 3 4 
Tandem 0 19 0 


Suburban. Class 5 office residing in the suburbs of a major city. 


Rural. Class 4 office residing in a rural area with a low population density 
and almost no business traffic. 
Table 2.5 shows the typical traffic intensity for metro, suburban, and rural 
environments in the United States. 
Table 2.6 provides an example of a typical traffic distribution for a mobile 
application in the U.S. metro environment. 


2.6 Definitions of Terms 
The following terms are used for mobile systems. 


Number of calls attempted. The total number of calls attempted (also called 
number of bids) is the best measure of unconstrained customer demand. 
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Table 2.4 Standard half-call mixes for peripheral processors controlling subscriber lines 
(percentage of total traffic). 


Traffic environments 


Type Metro SSC Suburban 


Ineffective 
False Start 8 11 14 
Permanent Signal 1 2 2 
Partial Dial 
Abandon 2 3 4 
Time-out 1 1 1 
Originating 
Answered 40 37 36 
No Answer 6 5 6 
Busy 8 6 7 
Terminating 
Answered 34 38 33 
No Answer 6 4 6 
Busy 5 6 


Table 2.5 Traffic intensity for (O + I). 


Environment (О + 1) calls/line 
Metro 3.5-4.0 
Suburban 2.0-2.5 
Rural 1.2-1.5 


Table 2.6 Typical traffic distribution in U.S. metro 
environment for mobile. 


Application Traffic Type Distribution 
Mobile Mobile to land 6096 
Mobile to mobile 1096 


Land to mobile 3096 
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Number of calls completed. The number of calls completed in a network 
sense (i.e., calls reaching ringing tone or being answered), when compared 
with number of calls attempted, provides a measure of the state of network 
congestion. 


Grade of Service (GoS). (No. of busy hour call attempts) — (No. of busy 
hour call completed)/(No. of busy hour call attempts). 


The number of answered calls is lower than the number of attempted calls, 
since some calls are bound to encounter either a “subscriber-busy” state or a 
“ring tone/no reply” condition. The ratio between the number of successful calls 
(answered) and the total number of call attempts (seizure) is called answer-seizure 
ratio (ASR), whereas answer-busy ratio (ABR) is the number of successful calls 
(answered) and the total number of busy calls. These ratios represent the prob- 
ability that a user will be able to complete a call on any given attempt. 


ABR = (No. of calls answered)/(No. of busy calls) 


ASR = (No. of calls answered)/(No. of calls attempted) 


ABR and ASR are measured over relatively short periods of time (5 to 
15 minutes). Both are good indicators of instantaneous network congestion. Lower 
value of ABR or ASR indicates higher network congestion. However, higher ABR 
or ASR value does not mean lower network congestion since calls may remain 
unanswered due to other reasons. 


Quality of Service (QoS). QoS has different meanings for different people. 
For a service provider QoS indicates how satisfied a customer is with the 
service. As an example, we might find that about half of the time a cus- 
tomer dials a number the call goes awry or the caller does not get a dial 
tone or is unable to hear what is being said by the calling party. All these 
have an impact on QoS. QoS is an important factor in many areas of the 
telecommunications business. Several factors affect QoS. These are: 


* Transmission quality (level, crosstalk, echo, etc.) 
* Dial-tone delay, and post dial delay 

* Grade of service 

* Fault incidence and service deficiency 

* Adaptation of the system to the subscribers 


When QoS requirements are set, one of the two following approaches can 
be used: 


* Design for the maximum permitted impairments in the most unfavorable 
condition 
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* Design for a certain range of impairments occurring as a result of a chance 
combination of elements, such as the majority of a subscriber's opinion 
being favorable (also known as statistical design methodology) 


Both approaches have weaknesses. The first may require unnecessary high 
performance to satisfy those rare unfavorable cases. Some subscribers may be 
very unhappy with the second approach, which will be considerably more influ- 
enced by variability of plant performance. Such variability is observed in areas 
of signaling and transmission and should be taken into consideration while plan- 
ning technical areas. The North American Region follows the statistical design 
approach. In Europe the maximum design impairment method is used, although 
it is often modified, where, for instance, certain standards will be satisfied for only 
95% of the situations. 


Example 2.9 

We consider a wireless network with following data: 
* Total population: 200,000 
* Subscriber penetration: 2596 


* Average call holding time for mobile-to-land and land-to-mobile subscribers: 
100 seconds 


* Average calls/hour for mobile-to-land and land-to-mobile subscribers: 
3 calls/hour 


* Average call holding time for mobile-to-mobile subscribers: 80 seconds 
* Average calls/hour for mobile-to-mobile subscribers: 4 calls/hour 
• Traffic distribution is: 


Mobile-to-land: 5096 
Land-to-mobile: 4096 


Mobile-to-mobile: 10% 


Calculate total traffic in Erlangs. If each MSC can handle 1800 Erlangs traffic, 
how many MSCs are required to handle the total traffic? 


Solution 
Traffic generated by a subscriber (mobile-to-land or land-to-mobile): 


Q(ML)(LM) = UM — 0.0833 Erlangs 


Traffic generated by a subscriber (mobile-to-mobile): 


_ 4x 80 _ 
амм = -3c00 0.0889 Erlangs 
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No. of wireless subscribers: 200,000 х 0.25 = 50,000 
Total Traffic: 45,000 х 0.0833 + 5,000 х 0.0889 = 4194.5 Erlangs 


. 4, 4194.5 _ E 
No. of MSCs required: 1800 2.3323 


2.7 Data Collection 

Traffic data is collected periodically to access performance of the mobile switching 
center. The data is used in overall administration, engineering, and maintenance 
of an office. Traffic measurement reports can also be provided on the customer's 
local exchange access line or trunk group from the serving central office. Reports 
are available on a one-week basis, consisting of seven consecutive days or a 
monthly report that contains a minimum of four consecutive weeks of data. The 
reports disclose minutes, attempts, overflow, etc. The traffic measurement report 
is intended to assist customers in designing and administering communications 
or business activities associated with telephone service. The following data is col- 
lected on an MSC [8]: 


Peg Count: One peg count for each of the following categories —call attempt, 
trunk-group seizure attempt, test made for dial tone speed, call queued 


Overflow: Overflow for each attempt collected for universal tone decoders, 
trunk groups, etc. 


Traffic Usage: Measured for trunks, decoders, etc. 
Customer Usage: Customer usage — Total usage — Maintenance usage 


2.8 Office Engineering Considerations 
The following steps are often taken in typical office engineering of a wireline or 
wireless office. 


1. MSCs are engineered and administered based on the traffic load during the 
average busy hour of the busy season. 

2. The busy hour is used for the overall administration, engineering, and 
maintenance of an office. 

3. The component busy hour is used to establish trends, make projections, set 
capacities, and derive future requirements. 

4. Dial-tone speed delay is recorded whenever a test call does not receive a 
dial tone within 3 seconds. 

5. Terminating blockage is recorded whenever a terminating call is unable to 
complete because of a lack of an available path to the called line. 

6. Trunk-group busy hour is the time-consistent hour during which maximum 
trunk-group load occurs. Trunk-group busy hour data is used to provide 
an adequate trunk base to meet service requirements. 
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7. Traffic data is collected for one or two weeks by half-hour during all parts 
of the day that may produce high loads (e.g., 8 A.M. to 11 P.M.). 


8. Five days of the week with the heaviest load are determined; this is the 
business week of the office. 


9. The hour (on the clock hour or on the half-hour) with the highest total 
load for the business week is determined; this is the office busy hour. 


10. Traffic data collected for the busy hour for the months likely to be parts of 
the year that may produce high loads. 


11. The three months, not necessarily consecutive, having the highest busy 
hour load are determined; this is the busy season. 


12. The average load for the busy hour for the busy season’s business day is 
(Average Busy Season per Busy Hour) (ABS/BH) 


13. The following approximate relations can be used to estimate the design 
traffic: 


(O + T) call: (HD)/(ABS) = 1.4 — 1.5 
(О + 1) call: (HD)/(ABS) = 1.6 — 1.7 


High day (HD) origination attempts per call = 1.45 


Example 2.10 
Calculate the ABS/BH calling rate and CCS for a switch located in a large metro- 
politan area. The switch carries 100,000 lines. The distribution of the lines on the 
switch is as follows: 

* Residential lines: 15,000 

* Business lines: 80,000 

• PBX, WATS, and Foreign Exchange (FX) lines: 5000 

The ABS/BH call rates for residential, business, and high-usage customers 

are 2, 3, and 10 calls per line, respectively. The average call holding times for 
these customers are 140, 160, and 200 seconds, respectively. Assuming that the 


HD/ABS for the switch is equal to 1.5, calculate the design call capacity for the 
switch and design Erlangs. 


Solution 
Percentage of residential lines: 15,000/100,000 = 0.15 = 15% 
Percentage of business lines: 80,000/100,000 = 0.80 = 80% 
Percentage of high usage lines: 5,000/100,000 = 0.05 = 5% 
CCS per residential line: 2 х 140/100 = 2.8 
CCS per business line: 3 X 160/100 — 4.8 
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CCS per high-usage line: 10 X 200/100 = 20 
Calling rate: 2 X 0.15 + 3 х 0.8 + 10 x 0.05 = 3.2 calls per line 
CCS rate = 2.8 X 0.15 + 4.8 X 0.8 + 20 X 0.05 = 5.26 CCS per line 


Average call holding time per line for the switch: NR X 100 = 164 seconds 
ABS/BH calls: 3.2 х 100,000 = 320,000 | 


ABS/BH usage: 3:40 = 


Design call capacity based on HD: 1.5 х ABS/BH = 1.5 х 320,000 
— 480,000 calls 


Design Erlangs based on HD: 1.5 X 14,611 = 21,917 


— 14,611 Erlangs 


2.9 Traffic Types 


We can classify traffic sources as either infinite or finite. For the infinite traffic 
sources, the probability of call arrival is constant and does not depend on the 
occupancy of the system. It also implies an infinite number of call arrivals, each 
with a small call holding time. When the number of sources offering traffic to a 
group of trunks or circuits is comparatively small in comparison to the number of 
circuits, the traffic sources are referred to as finite. We can also conclude that with 
a finite number of traffic sources the arrival rate is proportional to the number of 
sources that are not already engaged in sending a call. 

The probability distributions of traffic can be classified as smooth, rough, 
and random. Each traffic distribution can be defined by y, the variance-to-mean 
ratio (VMR) given as 


N 


=o (2.5) 
T 
where: 
о? = variance 
u = mean 


y is less than 1 for smooth traffic. For rough traffic, y is greater than 1. When 
y is equal to 1, the traffic distribution is random. The Poisson distribution func- 
tion is an example of random traffic in which VMR - 1. Rough traffic tends to be 
peakier than random or smooth traffic. For a given GoS more circuits are required 
for rough traffic because of greater spread of the traffic distribution curve. 

Smooth traffic behaves like random traffic that has been filtered. The filter is 
the telephone exchange. The telephone exchange looking out at its subscribers sees 
call arrivals as random traffic, assuming that the exchange has not been designed 
for more traffic (over dimensioned). Smooth traffic is the traffic on the telephone 
exchange outlets. The filtering or limiting of the peakiness is done by call blockage 
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during busy hour. The blocked traffic is actually overflowed to an alternative route. 
Smooth traffic is characterized by the Bernoulli distribution (refer to Equation 2.6). 
If we assume subscribers make calls independent of each other and that each has 
a probability, p, of being engaged in a conversation, then if 7 subscribers are exam- 
ined, the probability that x subscribers will be engaged in a conversation is given as: 


B(x) = C™p*(1 — р)" O<x<n (2.6) 


where: 
Mean = up 
Variance = np(1 — p) 
C? means the number of ways that x entities can be taken z at a time. 


The Poisson probability distribution function can be derived from the 
Bernoulli distribution. If we assume that the number of subscribers, n, is very 
large and the calling rate per line, 5, is low such that mean (nh = m) remains 
constant; allowing n to increase to infinity, then 


pix) = te (2.7) 


x! 


where: 
х = 0, 1, 2,... 7 
т = пр (теап) 
п = number of subscribers 
h = calling rate per line 


2.10 Blocking Formulas 

A call is termed lost or blocked when it cannot be completed because all the con- 
necting equipment is busy, even though the line that the caller wishes to reach may 
be idle. The probability of blocking is an important parameter in teletraffic engi- 
neering. In conventional teletraffic engineering three models are used for handling 
or dispensing lost calls. 


* Blocked Call Held (BCH) 


* Blocked Call Cleared (BCC) 
* Blocked Call Delayed (BCD) 


The BCH concept assumes that the user will immediately reattempt the call 
on receipt of a congestion signal and will continue to redial. The user hopes to 
seize connection equipment or a trunk as soon as equipment is available. In the 
BCH concept, lost calls are held or waiting at the calling user's telephone. The 
principal traffic formula in North America is based on the BCH concept. 
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The BCC concept is primarily used in Europe, Asia, and Africa. In this case, 
the user hangs up and waits for some interval before reattempting the call if the 
user hears the congestion tone on the first attempt. The Erlang B formula is based 
on this criterion. 

The BCD concept assumes that the user is automatically put in a queue 
and is served when the connection equipment becomes available. The method 
by which a waiting call is selected from the pool of waiting calls is based on 
the queue discipline (such as first-come first-served, first-come-last-served etc.). 
In the queuing system the GoS is defined as the probability of delay. The Erlang C 
formula is based on this concept. 

There are several blocking formulas to determine the number of circuits 
(or trunks) required on a route based on busy hour traffic load. The factors that 
are used include: call arrivals and holding-time distributions; number of traffic 
sources; availability; and handling of lost calls. These factors help in determining 
which formulas to use given a particular set of circumstances. 

Erlang B loss formula has been widely used outside the United States. Loss 
implies the probability of blockage at the switch due to either congestion or all 
trunks being busy. This is expressed as the GoS (Св) or probability of finding 
N channels busy. In the United States the Poisson formula based on the BCH 
concept is used to determine number of trunks required on a route. This formula 
is also called the Molina formula. 


2.10.1 Erlang B Formula 
The Erlang B formula [2] is expressed as GoS or probability of finding N channels 
busy. 

The assumptions in the Erlang B formula are: 


* Traffic originates from an infinite number of traffic sources independently. 
* Lost calls are cleared assuming a zero holding time. 

* Number of trunks or service channels is limited. 

* Full availability exists. 

* Inter-arrival times of call requests are independent of each other. 


* The probability of a user occupying a channel (called service time) is based 
on an exponential distribution. 


* Traffic requests are represented by a Poisson distribution implying exponen- 
tially distributed call inter-arrival times. 


Св = B(N, A) = -AA (2.8) 


У (Ai 
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where: 
N = number of serving channels 
A = offered load, and 
B(N, A) = blocking probability 


2.10.2 Poisson's Formula 
The Poisson formula is used for designing trunks on a route for a given GoS [3,9]. 
It is used in the United States. 
The assumptions in Poisson’s formula are: 
e Traffic originates from an infinite number of independent sources 
• Traffic density per traffic source is equal 
* Lost calls are held 


* A limited number of trunks or service channels exist 


py» 4 (2.9) 


where: 
рь = probability of blocking 
A = offered load, and 


N = number of trunks or service channels 


2.10.3 Erlang C Formula 

The Erlang C [2] formula assumes that a queue is formed to hold all requested 

calls that cannot be served immediately. Customers who find all N servers busy 

join a queue and wait as long as necessary to receive service. This means that the 

blocked customers are delayed. No server remains idle if a customer is waiting. 
The assumptions in the Erlang C formula are: 


* Traffic originates from an infinite number of traffic sources independently. 
* Lost calls are delayed. 
* Number of trunks or service channels is limited. 


* The probability of a user occupying a channel (called service time) is based 
on an exponential distribution. 


* Calls are served in the order of arrival. 


|.  AN/[NY(1 — A/N)] 
C(N, A) = ктт (2.10) 
A ita, 
i! NY(1 — A/N) 
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where: 
N = number of service channels 
A = offered load, and 
C(N, A) = blocking probability 


The Erlang B formula holds even when the load is greater than number of 
servers (A > N) because, unlike the BCD model in which all calls are eventually 
served, the BCC model allows calls to be lost when all servers are busy. Therefore, 
the BCC system never becomes unstable. 


2.10.4 Comparison of Erlang B and Poisson's Formulas 
A comparison between the Erlang B and Poisson’s blocking formulas shows that 
Poisson’s formula results in higher blocking than that obtained by the Erlang B 
formula for a given traffic load. 

For the Erlang B system, the offered load can be divided into the load lost 
and the carried traffic load A* (i.e., amount of load serviced by system). 


A* = A[1 — B(N, A)] (2.11) 


where: 
A — offered load 


N = number of servers 


The carried traffic equals that portion of offered traffic load A that is not 
lost, and AB[N, A] is the lost traffic. In a BCD system, no calls are lost. Thus, 
the carried load is equal to the offered load. The efficiency, p, of a BCC system is 
defined as the load carried per server (i.e., A*/N). 


2.10.5 Binomial Formula 
Since the binomial formula is also used in teletraffic engineering occasionally, 
we include the information here. More details can be found in reference [3]. The 
assumptions used in the binomial formula are: 

* Traffic originates from a finite number of traffic sources independently. 

* Traffic density per traffic source is equal. 

* Lost calls are held in the system in a queue. 


5-1 
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where: 
D = expected traffic density 
pp = blocking probability 
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N = number of channels in the group of channels, and 
s = number of sources in group sources 


Example 2.11 

The maximum calls per hour in a mobile cell equals 4000 and the average call 
holding time is 160 seconds. If the GoS is 2%, find the offered load A. How many 
service channels are required to handle the load? 


Solution 
A= 450020160 = 166.67 Erlangs (offered load) 


Using the Erlang B table in Appendix A; N = 182 channels giving 168.3 Erlangs 
at 2% blocking. 


Example 2.12 

How many mobile subscribers can be supported with 50 service channels at 2% 
GoS? Assume the average call holding time equals 120 seconds and the average 
busy hour call per subscriber is 1.2 calls per hour. 


Solution 

From the Erlang B table in Appendix A, for 50 channels at 2% blocking, 
the offered load = 40.26 Erlangs. The carried load will be: 40.26 х (1 — 0.02) 
— 39.45 Erlangs 


Average traffic per user — ETT — 0.04 Erlangs 


_ 39.45 _ 
No. of users OOF 986 


2.11 Summary 

In this chapter we discussed the basic principles of teletraffic engineering that 
are used to engineer and administer a wireline or wireless switch. We also pre- 
sented examples to determine the design call capacity of a switching system. 
We discussed Erlang B and Poisson’s blocking formulas for calculating blocking 
probabilities or the GoS of the system. We concluded the chapter by present- 
ing the Erlang C and binomial formulas that apply to a queued system. Several 
numerical examples were given to illustrate the applications of various blocking 
formulas. 
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Problems 


2.1 


2.2 
2.3 
2.4 
2.5 


2.6 


2.7 


2.8 


2.9 


2.10 


2.11 


2.12 


Define pegcount, busy hour (BH), busy hour call attempts (BHCAs), and 
grade of service (GoS). 


State the assumptions of the Erlang B formula. 
Define *blocked call clear? and *blocked call held? systems. 
What are the traffic measurements for a switching system? 


What is the average call holding time in seconds of a group of circuits 
that has accumulated 0.4445 Erlang of usage in an hour, based on 330 
call attempts with 10 calls overflowing (i.e., calls not served)? 


A trunk accumulated 0.75 Erlang of usage while 9 calls were carried in 
an hour with no overflow. What is the average holding time per call in 
seconds? 


A switching system is designed to support 80,000 subscribers during 
the BH. Each subscriber generates an average of 1.8 calls/hour during 
the BH with an average call holding time of 100 seconds. Calculate the 
offered traffic load to the switching system. 


If there are 60 radio channels in a cell to handle all the calls and the average 
call holding time is 120 seconds, how many calls are handled in this cell 
with a GoS of 2%? 


Consider an urban area in which average mobile subscriber has 600 minutes 
of use (MoU) per month. Eighty percent of traffic occurs during workdays 
(i.e., only 20% of traffic occurs on weekends). There are 20 workdays per 
month. Assuming that in a given day, 10% traffic occurs during busy hour, 
what is the traffic per subscriber in Erlangs? 


Determine the number of subscribers that can be supported by a cell 
with 63 radio channels. Assume each subscriber generates an average 
of 2.9 calls per hour with an average call holding time of 110 seconds. 
Also determine the traffic generated by each subscriber in CCS. Assume 
GoS = 2%. 


Estimate the number of subscribers that can be supported by a cell with 
400 radio channels. Assume each subscriber generates an average of 
2.5 calls per hour with a call holding time of 120 seconds. Assume 2% GoS. 
Consider a wireless network with the following data: 

* Total population: 300,000 

e Subscriber penetration: 40% 


e Average call holding time for mobile-to-land and land-to-mobile calls: 
100 seconds 
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e Average call holding time for mobile-to-mobile calls: 80 seconds 

e Average calls per hour for mobile-to-land and land-to-mobile: 3 

* Average calls per hour for mobile-to-mobile: 4 

e Traffic distribution: Mobile-to-land = 50%; Land-to-mobile = 40%; 
and Mobile-to-mobile = 10% 
a. Calculate the total traffic in Erlangs, and 


b. If each switch can support 3000 Erlangs, how many switches are 
required in the network? 
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CHAPTER J 


Radio Propagation and 
Propagation Path-Loss Models 


3.1 Introduction 

Exponential growth of mobile communications has increased interest in many 
topics in radio propagation. Much effort is now devoted to refine radio propaga- 
tion path-loss models for urban, suburban, and other environments together with 
substantiation by field data. Radio propagation in urban areas is quite complex 
because it often consists of reflected and diffracted waves produced by multipath 
propagation. Radio propagation in open areas free from obstacles is the simplest 
to treat, but, in general, propagation over the earth and the water invokes at least 
one reflected wave. 

For closed areas such as indoors, tunnels, and underground passages, no 
established models have been developed as yet, since the environment has a 
complicated structure. However, when the environmental structure is random, 
the Rayleigh model used for urban area propagation may be applied. When the 
propagation path is on line of sight, as in tunnel and underground passages, the 
environment may be treated either by the Rician model or waveguide theory. 
Direct wave models may be used for propagation in a corridor. 

In general, radio wave propagation consists of three main attributes: 
reflection, diffraction and scattering (see Figure 3.1) [2]. Reflection occurs when 
radio wave propagating in one medium impinges upon another medium with 
different electromagnetic properties. The amplitude and phase of the reflected 
wave are strongly related to the medium’s instrinsic impedance, incident angle, 
and electric field polarization. Part of the radio wave energy may be absorbed or 
propagated through the reflecting medium, resulting in a reflected wave that is 
attenuated. 

Diffraction is a phenomenon by which propagating radio waves bend or 
deviate in the neighborhood of obstacles. Diffraction results from the propagation 
of wavelets into a shadowy region caused by obstructions such as walls, buildings, 
mountains, and so on. 

Scattering occurs when a radio signal hits a rough surface or an object having 
a size much smaller than or on the order of the signal wavelength. This causes the 


47 


48 3 Radio Propagation and Propagation Path-Loss Models 


Receiver 
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Receiver 
(a) Reflection of the radio wave Transmitter 
(b) Diffraction of the radio wave 


Scattering location 


Receiver 


Transmitter | ; 
(c) Scattering of the radio wave 


Figure 3.1 Reflection, diffraction and scattering of radio wave. 


signal energy to spread out in all directions. Scattering can be viewed at the receiver 
as another radio wave source. Typical scattering objects are furniture, lamp posts, 
street signs, and foliage. 

In this chapter, our focus is to characterize the radio channel and identify those 
parameters which distort the information-carrying signal (i.e., base band signal) as it 
penetrates the propagation medium. The several empirical models used for calculating 
path-loss are also discussed. 


3.2 Free-Space Attenuation 

The most simple wave propagation case is that of a direct wave propagation in 
free space [5,7]. In this special case of line-of-sight (LOS) propagation there are 
no obstructions due to the earth's surface or other obstacles (see Figure 3.2). We 
consider radiation from an isotropic antenna. This type of antenna is completely 
omni-directional, radiating uniformly in all directions. While there is no such 
thing as a purely isotopic antenna in practice, it is a useful theoretical concept. 
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Figure 3.2 Line-of-sight propagation. 


The received power, P,, at the receiving antenna (mobile station), located at 
a distance, d, from the transmitter (base station) is given for free space propaga- 
tion [10] as: 


р, = P: Al GG» (3.1) 


If other losses (not related to propagation) are also present, we can rewrite 
Equation 3.1 as: 


De rn \2 . GoGin Ки еер 
| | Lo LpLo а 


Р, = received power 


Р, = transmitted power 
A = length = © = 27 
= wave length = = ш 
юс = carrier frequency in rad./sec 
c = velocity of electromagnetic waves in the free space (3 х 10° m/s) 


Сь = gain of the transmitting (base station) antenna 

Gm = gain of the receiving (mobile) antenna 

d = antenna separation distance between transmitter and receiver (i.e., 
base station and mobile station) 

Lo = other losses expressed as a relative attenuation factor 


2 И 
Ly = ES — free space path loss, often expressed as an attenuation in 


decibels (dB) 


= 20log 4" 4B) 
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We can express Lp (dB) in free space as: 
(Lp) free = 32.44 + 20logf + 201ов dB (3.3) 


where: 
f = carrier frequency in MHz 
d = separation distance in km (>1km) 


It should be noted that the free-space attenuation increases by 6 dB whenever 
the length of the path is doubled. Similarly, as frequency is doubled, free-space 
attenuation also increases by 6 dB. 


3.3 Attenuation over Reflecting Surface 

Free-space propagation is encountered only in rare cases such as satellite-to-satellite 
paths. In typical terrestrial paths, the signal is partially blocked and attenuated due 
to urban clutter, trees, and other obstacles. Multipath propagation also occurs due 
to reflection from the ground. Signals reflected from the ground are fundamentally 
no different than any other reflected signal. However, they are considered sepa- 
rately because they contribute to the received signal power at virtually all terrestrial 
receiving locations. 

The energy radiated from a transmitting antenna may reach the receiving 
antenna over several possible propagation paths. For many wireless applications 
in the 50 to 2000 MHz range, two components of the space wave are of primary 
concern: energy received by means of the direct wave, which travels a direct path 
from the transmitter to the receiver, and a ground-reflected wave, which arrives at 
the receiver after being reflected from the surface of the earth. This is commonly 
referred to as the two-ray model. Other propagation paths such as sky and surface 
waves are often neglected. 

We assume that the base station and mobile station antenna heights, Рь and hj, 
are much smaller compared to their separation, d, and the reflecting earth surface is 
flat (see Figure 3.3 for direct and reflected waves). The received power at the antenna 
located at a distance, d, from the transmitter, including other losses, Lo, is given as 
[7,10] (see Appendix B for derivation): 


я а (GpGin) 
P, т m P, (3.4) 
where: 
а» dandd = 8 


Note that under the assumed conditions the received signal level depends 
only on the transmitted power, antenna heights, and separation distance; there is 
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no frequency dependence. Furthermore, the total attentuation increases by 12 dB 
when the separation distance is doubled. 
The expression for the effects of ground reflections from a flat (or plane) 
27 = т 
№а = 4) 8 
(see Figure 3.3). The results аге not valid for Aa > 7/8. When Aa > 7/8, the 
attentuation factor will be: 


earth provides results that are approximately correct for Aa = 


Ag, = 1 + p? — 2pcos Aa (3.5) 


where: 
p = reflection coefficient of ground (assumed to be —1) 


Example 3.1 

With by = 100 ft, and hm = 5ft, and a frequency of 881.52 MHz (А = 1.116 ft), 
calculate signal attenuation at a distance equal to 5000 ft. Assume antenna gains 
are 8dB and OdB for the base station and mobile station, respectively. What are the 
free-space and reflected surface attenuations? Assume the earth surface to be flat. 


Solution 


d u 4рьр,һ„ 


4х 100 x 5 3 
_ Е E 
А RIT 1792 ft, d >d 


Gp = 8dB = 1093 = 6.3; Gm = 0dB = 1.0 


Transmitting Antenna Direct path: 13 


Reflected path: 12 + 23 


Ground 
Reflected Wave 
(dj) 


Ground 
d 


Figure 3.3 Geometry for direct and ground reflected waves. 
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Free-space attenuation: 


P; | e 1 | 4т X 5000 1 
= : = ; = B 
Р; A GpGin 1.116 6.3 X1 87d 


Attenuation on reflecting surface: 


P 2 р 2 p 
5C Г | ea = EE d | EE peo 
Example 3.2 
Consider a base station transmitting to a mobile station in free space. The following 
parameters relate to this communication system: 

* Distance between base station and mobile station: 8000m 

e Transmitter frequency: 1.5 GHz (А = 0.2 т) 

* Base station transmitting power, Р, = 10 W(10 dBW) 

* Total system losses: 8 dB 

e Mobile receiver noise figure № = 5 dB 

* Mobile receiver antenna temperature — 290K 

* Mobile receiver bandwidth B,, = 1.25 MHz 


* Antenna gains are 8dB and OdB for the base station and mobile station, 
respectively. 


* Antenna height at the base station and mobile station are 30m and 3m, 
respectively. 


Calculate the received signal power at the mobile receiver antenna and 
signal-to-noise ratio (SNR) of the received signal. 


Solution 


Free space path loss — -20og| 30> | = —117dB 


Р, = —117 + 8 + 10 + 0 — 8 = -107dBW = -77 dBm 
Te = 290(3.162 — 1) = 627K 


P, = 1.38 x 10723 (627 + 290)(1.25 x 106) = 1.58 x 10-14 = —138dBW 


P, 
SSNR = p 107 — (-138) = 31dB 


n 
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3.4 Effect of Earth's Curvature 


We assumed a flat earth in Section 3.3. In reality, the earth is curved, preventing LOS 
propagation to great distances. Thus, Equations 3.1 and 3.2 are only approximately 
correct for distances less than the distance d to the radio horizon (see Figure 3.4). 
The distance d to the radio horizon can be determined for a terrestrial transmitter 
as follows. 

We consider a circle representing the earth [12]. From Figure 3.4 we write 


d^ + К = (Re + рь)? 


d? = 2Rehp + b? 


where: 
R, = radius of earth 
b, = antenna height 


Since 28,рь » he. 


d= J2Rebp (3.6) 


As an example with an antenna height of 600m and earth’s radius of about 
6400km, the distance to the horizon is about 88 km. On average the refractive index 
of earth’s atmosphere is such that the earth’s radius appears to be about 33% more 
than the actual radius. Thus, the effective radius of the earth is often assumed to 
be 8500km. The curvature of the earth further affects the propagation of the space 


Curved Path 


Distance d (radio horizon) x Straight Path 
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Fictitious Horizon 


Actual Horizon 
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Earth’s Center Earth's Center (radius 4/3 А,) 
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Figure 3.4 Geometry for a spherical earth. 
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wave since the ground-reflected wave is reflected from a curved surface. Therefore, 
the energy on a curved surface diverges more than it does from a flat surface and 
the ground-reflected wave reaching the receiver is weaker than for a flat earth. The 
divergence factor D that describes this effect is less than unity and is given as: 


D- 1 (3.7) 


where: 
bm = mobile antenna height 


D in Equation 3.7 ranges from unity for a small value of d and approaches 
zero as d approaches the distance to the radio horizon. It can be combined with 
the ground reflection coefficient so that the attenuation due to ground reflections 
becomes 


Ag = J1 + (рр)? — 2ррсоѕ(Да) (3.8) 
where: 
Ag, — attenuation factor due to ground reflections 
p = reflection coefficient of the earth surface 


D = divergence factor 


In Equation 3.8 the reflection coefficient, p, has been modified to account for 
the divergence factor, D. The effect of the divergence factor is to reduce the effective 
reflection coefficient of the earth. The equation for calculating the received power 
in dBm is given as: 


P, = P; + Gp + Gm + 20log(Ag) + 20log(Ag,) dBm (3.9) 


where: 
Ав = [\/(4ard)|*, free space attenuation 


3.5 Radio Wave Propagation 

Radio waves propagate [7] through space as travelling electromagnetic waves. 
The energy of signals exists in the form of electrical and magnetic fields. Both 
electrical and magnetic fields vary sinusoidally with time. The two fields always 
exist together because a change in electrical field generates a magnetic field and a 
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change in magnetic field develops an electrical field. Thus there is continuous flow 
of energy from one field to the other. 

Radio waves arrive at a mobile receiver from different directions with 
different time delays. They combine via vector addition at the receiver antenna to 
give a resultant signal with a large or small amplitude depending upon whether 
the incoming waves combine to strengthen each other or cancel each other. As a 
result, a receiver at one location may experience a signal strength several tens of 
decibels (dB) different from a similar receiver located only a short distance away. 
As a mobile receiver moves from one location to another, the phase relationship 
between the various incoming waves also changes. Thus, there are substantial 
amplitude and phase fluctuations, and the signal is subjected to fading. Figure 3.5 
illustrates the fading characteristics of a mobile radio signal. 

A steady decrease in the received signal power at a separation distance, d, of 
several kilometers (or miles) occurs. This is the signal attenuation. Attenuation is 
proportional to the second power of distance in the free space, but can vary to the 
fourth or fifth power in built-up areas because of reflections and obstacles. 

When we focus on a distance of a couple of kilometers, we observe that signal 
power fluctuates around a mean value and the fluctuations have a somewhat longer 
period. This is referred to as long-term or slow fading. 

When we concentrate and examine the signal power over a few hundred 
meters, we find that signal power fluctuates more rapidly. These rapid fluctua- 
tions are caused by a local multipath. The phenomenon giving rise to these rapid 
fluctuations is referred to as short-term or fast fading. 

The slow fading is caused by movement over distances large enough to produce 
gross variations in the overall path between the base station and the mobile station. 
Fast fading occurs usually over distances of about half a wavelength. For VHF and 


Short-Term Fading r(t) 


^ 4 Long-Term Fading m(t) 


> Time 


Figure 3.5 Mobile radio signal fading representation. 
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ОНЕ a vehicle travelling at 30 miles per hour (mph) can encounter several fast fades 
in a second. Therefore, the mobile radio signal (see Figure 3.5) contains a short-term 
fast fading signal superimposed on a long-term slow fading signal (which remains 
constant over a small area but varies slowly as the mobile receiver moves). 

To separate out fast fading from slow fading, the magnitude of the received 
signal is averaged over a distance on the order of 10 m, and the result is referred to 
as the small-area average or sector average [1]. The rapid fluctuation in fast fading 
is a result of small movements of the transmitter, receiver, and surrounding objects. 
Because fast fading is random, its statistical properties are used to determine sys- 
tem performance. For locations that are heavily shadowed by surrounding build- 
ings, it is typically found that a Rayleigh distribution approximates the probability 
density function (PDF) [8,9,14,18]. For locations where there is one path making 
a dominant contribution to the received signal, such as when the base station is 
visible to the mobile station (typically in the indoor environment), the distribution 
function is typically found to be that of a Rician distribution [13,14]. 

Because of shadowing by buildings and other objects, the average within 
individual small areas also varies from one small area to the next in an apparently 
random manner, referred to as the shadow effect. Shadow effect is often called 
lognormal fading because its distribution is represented by lognormal distribu- 
tion. In a moving vehicle, slow fading is observed over a longer time scale than 
fast fading. Slow fading is the average of received signal power over large trans- 
mitter and receiver separation distances. A local mean is computed by averaging 
signal power over 5 to 40 wavelengths (A), or separation distance between 40 to 
80 fades (where a signal crosses a certain level). 

Using a reference distance, do, which is the signal attenuation at a standard 
distance from the antenna (usually dọ = 1m is used for indoor environment and 
dy = 1 km for outdoor environment) the received power, Р, at distance d is given as: 


P, = Po(do/d)* (3.10) 


where: 
y = path loss exponent, varying from 2 (free-space) to 5 (urban environment) 
Po — power at reference distance do 
P, = received power that is proportional to d^ 


The received power under non-line-of-sight propagation conditions can be 
written as: 


P,(d) = 10log[Po(do)] + 10%уІор (40/4) (dBm) (3.11) 


The accuracy of P, can be improved by accounting for a random shadow effect 
caused by obstructions such as buildings or mountains. Shadow effect is described 
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by a zero-mean Gaussian random variable, Хе, with standard deviation, o (dB). 
Under ideal conditions, it is possible to estimate path loss Lp(d) from the transmitter 
(P;) and receiver power (Р,) as Lp(d) = P; — Р,, but this approach ignores the fact 
that the signal undergoes lognormal fading, which could reduce the received power 
at any location. Since the fading is long term, no improvements can be expected if 
the mobile station moves through short distances. 


Allowable path loss Lp(d) = Path loss + Shadow effect Xo (3.12) 
Lp(d) = Lp(do) + 10ylog (d/do) + Xo (dB) (3.13) 


where: 

Lp(do) is known as the 1m ог 1km loss, or insertion loss that arises due 
to free-space path loss and antenna inefficiencies (i.e., reference value of path 
loss). 

X; is often based on measurement made over a wide range of locations and 
transmitter-receiver separation. An average value of 8 dB for o is often used giving 
X, as 10.5 dB. 


It should also be noted that whenever relative motion exists between trans- 
mitter and receiver, there is a Doppler shift in the received signal. The maximum 
Doppler shift fm is given as: 


=. 14 
„=> (3.14) 
where: 
c = velocity of electromagnetic waves in free space 
v = velocity of the moving vehicle 
f = frequency of the carrier 


In the mobile radio case, the fading and Doppler shift occur as a result of 
the motion of the receiver through a spatially varying field. Doppler shift also 
results from the motion of the scattering of the radio waves (e.g., cars, trucks, 
vegetation). The effect of multipath propagation is to produce a received sig- 
nal with an amplitude that varies quite substantially with location. At UHF and 
higher frequencies, the motion of the scattering also causes fading to occur even if 
the mobile station or handset is not in motion. 

The received signal s(t) can be expressed as the product of two components: 
the signal subjected to long-term fading, m(t), and the signal subjected to short- 
term fading, r(t), as: 


s(t) = m(t) - r(t) (3.15) 
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Example 3.3 

Calculate the received power at a distance of 3km from the transmitter if the 
path-loss exponent у is 4. Assume the transmitting power of 4W at 1800 MHz, 
a shadow effect of 10.5 dB, and the power at reference distance (dọ = 100 m) of 
—32 dBm. What is the allowable path loss? 


Solution 
Using Equation 3.11 and including shadow effect we get 


Pd) = 10log[Po(do)] + 10ylog(do/d) + Xo 


Розо + 10 х4 х 18/399, | + 10.5 = —80.54Вт 


Allowable path loss = P; — P, = 36 — (—80.5) = 116.5dB 


Example 3.4 


What is the separation distance between the transmitter and the receiver with an allow- 
able path loss of 150dB and shadow effect of 10dB? The path loss in dB is given as: 


Lp = 133.2 + 43logd 


where: 
d = separation distance in km 


Solution 
Using Equation 3.13, we have 


150 = 133.2 + 40logd + 10 
= 6.8 _ 
Іова E 0.17 
d = 10977 = 1.48km 


3.6 Characteristics of a Wireless Channel 

The wireless channel is different and much more unpredictable than the wireline 
channel because of factors such as multipath and shadow fading, Doppler shift, 
and time dispersion or delay spread. These factors are all related to variability 
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introduced by mobility of the user and the wide range of environmental conditions 
that are encountered as a result. Multipath delays occur as a transmitted signal 
is reflected by objects in the environment between a transmitter and a receiver. 
These objects can be buildings, trees, hills, or even trucks and cars (see Figure 3.6). 
The reflected signals arrive at the receiver with a random phase offset, since each 
reflected signal generally follows a different path to reach the user’s receiver, result- 
ing in a random signal that fades as the reflections destructively or constructively 
superimpose on one another. This effectively cancels or adds part of signal energy 
for brief periods of time. The degree of fading will depend on the delay spread 
of the reflected signals as embodied by their relative phases, and their relative 
power. 

A mobile radio channel exhibits both time dispersion and frequency dispersion. 
Time dispersion is the distortion to the signal and is manifested by the spreading in 
time of the modulation symbols. This is caused by frequency-selective fading. A chan- 
nel, which is said to be frequency selective, has many frequency components that take 
different times to arrive at the receiver and undergo different attenuation levels. The 
frequency band over which the attenuation remains constant provides a frequency 


Initial Received 
Transmitted 3 Pulses 


Pulse 
1 
Base Station 
Antenna 
4 
Y 


Figure 3.6 Multipath delay. 
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region where all frequency components behave identically. We identify this frequency 
band as the coherence bandwidth of the channel. 

Time dispersion occurs when the channel is band-limited or when the coherence 
bandwidth of the channel is smaller than the modulation bandwidth. The time disper- 
sion leads to inter-symbol-interference (ISI), where the energy from one symbol spills 
over into another symbol, thereby increasing the bit-error-rate (BER). 

In many instances, the fading due to multipath delay will be frequency selective, 
randomly affecting only a portion of the overall channel bandwidth at a given time. 
In the case of frequency selective fading, the delay spread exceeds the symbol dura- 
tion. On the other hand, when there is no dispersion and delay spread is less than 
the symbol duration, the fading will be flat, thereby affecting all frequencies in the 
signal equally. Flat fading can lead to deep fades of more than 30 to 40 dB. 

Doppler shift is the random changes in a channel introduced as a result of a 
mobile user's mobility. Doppler spread has the effect of shifting or spreading the fre- 
quency components of a signal. This is described in terms of frequency dispersion. 
Like the coherence bandwidth, coherence time is defined as the time over which 
the channel can be assumed to be constant. The coherence time of the channel is 
the inverse of the Doppler spread. It is the measure of the speed at which channel 
characteristics change. This determines the rate at which fading occurs. When the 
channel changes are higher than the modulated symbol rate, fast fading occurs. 
Slow fading occurs when the channel changes are slower than the symbol rate. 


3.6.1 Multipath Delay Spread, Coherence Bandwidth, and 
Coherence Time 

As discussed earlier, the multipath delay spread is the time dispersion characteristic 

of the channel. Each multipath component is typically associated with different 

time delays and attenuation, the shortest of which is the LOS path. 

We denote the rms delay spread in multipath delay by tg and the maximum 
spread in frequency due to Doppler shift, fm. We use the coherence bandwidth, 
which is a range of frequencies over which two frequency components have a 
strong potential for amplitude correlation, to define whether the channel fading is 
flat or frequency selective. 

The coherence bandwidth (B,) between two frequency envelopes is given 
as [16]: 


Hx (3.16) 


| 2m 


Frequency components of a signal separated by more than В, will fade 
independently. A channel is a frequency-selective channel if Be < By, where By 
is the signal bandwidth. Frequency selective distortion occurs whenever a signal's 
spectral components are not all affected equally by the channel. In order to avoid 
channel-induced ISI distortion, the channel is required to be flat fading by ensuring 
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that В, > Bw. Thus, the channel coherence bandwidth sets an upper limit on the 
transmission rate that can be used without incorporating an equalizer in the receiver. 
The coherence time, Te, describes the expected time duration over which the 
impulse response of the channel stays relatively invariant or correlated. The coher- 
ence time is approximately inversely proportional to Doppler spread [16,17] 


2 1 
I o тр (3.17) 
where: 


fue x — maximum Doppler spread 


v = velocity of moving vehicle 
A = wavelength = c/f 
— frequency of carrier 
c = speed of electromagnetic wave in free space (3 х 10? m/s) 


A rule of thumb for the coherence time value is T, = 0.423/f,,. 

If the transmitted symbol interval, Ts, exceeds T., then the channel will 
change during the symbol interval and symbol distortion will occur. In such cases, 
a matched filter is impossible without equalization and correlator losses occur. 
A Rayleigh fading signal may change amplitude significantly in the interval Ту. 

If the signal symbol interval T; > T;, the channel changes or fades rapidly 
compared to the symbol rate. This case is called fast fading and frequency disper- 
sion occurs, causing distortion. If T; « T; the channel does not change during the 
symbol interval. This case is called slow fading. Thus, to avoid signal distortion 
caused by fast fading, the channel must be made to exhibit slow fading by ensuring 
that the signaling rate exceeds the channel fading rate T; < Т, 


Example 3.5 

Assuming the speed of a vehicle is equal to 60 mph (88 ft/sec), carrier frequency, 
fe = 860 MHz, and rms delay spread tg = 2р.ѕес, calculate coherence time and 
coherence bandwidth. At a coded symbol rate of 19.2 kbps (IS-95) what kind of 
symbol distortion will be experienced? What type of fading will be experienced 
by the IS-95 channel? 


Solution 
v = 60mph (=88 ft/sec) 


8 
ke jm ae x D. = 1.1442 ft 


Maximum Doppler shift = f,, = = AE = 77Hz 


EM MES 1 _ 
T. IW Xx 7 0.0021 seconds 
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106 
= == pi 
Ts = T9990 — 528% 


The symbol interval is much smaller compared to the channel coherence 
time. Symbol distortion is, therefore, minimal. In this case fading is slow. 


: _ ms cd. c 1 = 
Coherence bandwidth = В, = in СЕТТЕ 79.56kHz 


This shows that IS-95 is a wide band system in this multipath situation and 
experiences selective fading only over 6.5% (79.56/1228.8 = 0.0648 ~ 6.5%) of 
its bandwidth (B,, = 1228.8 KHz). 


3.7 Signal Fading Statistics 

As discussed earlier, the rapid variations (fast fading) in signal power caused by 
local multipaths are represented by Rayleigh distribution. The long-term vari- 
ations in the mean level are denoted by lognormal distribution. With a LOS 
propagation path, the Rician distribution is often used for fast fading. Thus, the 
fading characteristics of a mobile radio signal are described by the following 
statistical distributions (see Figures 3.7 and 3.8). 


K =—% dB 


Rayleigh Distribution 


p(n 


Rician Distribution 


Received signal envelope voltage r (volts) 


Figure 3.7 Rayleigh and Rician distribution. 
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probability density p(z) 


mean z= log[(S-S,,)/c,] 


Figure 3.8 Lognormal distribution. 


* Rician Distribution 
* Rayleigh Distribution 
* Lognormal Distribution 


3.7.1 Rician Distribution 

When there is a dominant stationary (nonfading) signal component present, such 
as a LOS propagation path, the small-scale fading envelope distribution is Rician. 
The Rician distribution has a probability density function (PDF) given by: 


QURE 


p(r) =e 207 оа юг А 20, r=0 (3.18) 
c c 


where: 
A = peak amplitude of the dominant signal and Io = (...) modified Bessel 
Function of the first kind and zero order 
7?/2. = instantaneous power 
o = standard deviation of the local power 
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The Rician distribution is often described in terms of a parameter K, known 
as the Rician factor and is expressed as: 


K= 1010625 ав (3.19) 
o 


As A — 0, K 2 dB and as the dominant path decreases in amplitude, the 
Rician distribution degenerates to a Rayleigh distribution (see Figure 3.7). 


3.7.2 Rayleigh Distribution 

The Rayleigh distribution is used to describe the statistical time-varying nature 
of the received envelope of a flat fading signal, or the envelope of an individual 
multipath component. The Rayleigh distribution is given as: 


|224) 
рт) =e ae 0<rse (3:20) 
oO 
where: 
c = rms value of the received signal 
72/2. = instantaneous power 
o? = local average power of the received signal before envelope detection 


Instead of the distribution of the received envelope, we can also describe a 
Rayleigh fading signal in terms of the distribution function of its received normalized 
power. 

Let Ф = (72/2)/о2, the instantaneous received power divided by the mean 
received power. Then d® = r/o? • dr and since p(r)dr must be equal to p(®)d®, 
we get 


—(72/2 2) 
(roe 2097) _ Lo 


р(Ф) = [p(r)dr\/[(r/0*)dr] = WE 


, О=Фф=әо (3.21) 


Equation 3.21 represents a simple exponential density function. Опе can 
rightfully say that a flat fading signal is exponentially fading in power. 


3.7.3 Lognormal Distribution 

Lognormal distribution describes the random shadowing effects which occur over 
a large number of measurement locations which have the same transmitter and 
receiver separation, but have different levels of clutter on the propagation path. 
The signal, s(t), typically follows the Rayleigh distribution but its mean square 
value or its local mean power is lognormal in dBm with variance equal to o?. 
Typically the standard deviation, o; equals 8 to 10 dB. 
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The lognormal distribution is given by (see Figure 3.8): 


р(5) = — ЛР (3.22) 


where: 
Sm = mean value of S in dBm 
с; = standard deviation of S in dB 
= 10 log s in dBm 
s = signal power in mW 


3.8 Level Crossing Rate and Average Fade Duration 

Doppler spread can be used to calculate the level crossing rate (LCR), or the average 
number of times a signal crosses a certain level. The combination of LCR and aver- 
age fade duration, which is the average time over which the signal below a certain 
level can be used to design the signaling format and a diversity scheme for cellular 
systems. Let p = К/К, „5 be the value of the specified amplitude level, R, normal- 
ized to local rms amplitude of the fading envelope К. based on the Rayleigh 
distribution of the received signal envelope. LCR and average fade duration are 
given by [1]: 


LCR = Ng = V2 «fin = pew?” (crossings per sec) (3.23) 
A fade duration = < - 1. 3.24 
verage fade duration NC (ms) ( ) 


where: 
fm = maximum Doppler shift 


Example 3.6 

Consider a flat Rayleigh fading channel to determine the number of fades per second 
for p = 1 and average fade duration, when the maximum Doppler frequency is 20 Hz. 
What is the maximum velocity of the mobile if the carrier frequency is 900 MHz? 


Solution 


Ng = Улт · ў, ре = V2 х 20 X1X e | = 18.44 fades per second 


elc WELLE 
1x20 D. 0.0073 s 


8 
= .с_ 3x10 _ = 
V = fin f 20x 9003109 6.66 m/s = 24 km/hour 


Average fade duration — 
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3.9 Propagation Path-Loss Models 

Propagation path-loss models [20] play an important role in the design of cellular 
systems to specify key system parameters such as transmission power, frequency, 
antenna heights, and so on. Several models have been proposed for cellular systems 
operating in different environments (indoor, outdoor, urban, suburban, rural). 
Some of these models were derived in a statistical manner based on field measure- 
ments and others were developed analytically based on diffraction effects. Each 
model uses specific parameters to achieve reasonable prediction accuracy. The 
long distance prediction models intended for macrocell systems use base station 
and mobile station antenna heights and frequency. On the other hand, the predic- 
tion models for short distance path-loss estimation use building heights, street 
width, street orientation, and so on. These models are used for microcell systems. 
When the cell size is quite small (in the range of 10 to 100m), deterministic mod- 
els based on ray tracing methods are used. Thus, it is essential to select a proper 
path-loss model for design of the mobile system in the given environment. 

Propagation models are used to determine the number of cell sites required 
to provide coverage for the network. Initial network design typically is based on 
coverage. Later growth is engineered for capacity. Some systems may need to start 
with wide area coverage and high capacity and therefore may start at a later stage 
of growth. 

The coverage requirement along with the traffic requirement relies on the 
propagation model to determine the traffic distribution, and will offload from 
an existing cell site to new cell sites as part of a capacity relief program. The 
propagation model helps to determine where the cell sites should be placed to 
achieve an optimal location in the network. If the propagation model used is not 
effective in placing cell sites correctly, the probability of incorrectly deploying a 
cell site in the network is high. 

The performance of the network is affected by the propagation model chosen 
because it is used for interference predictions. As an example, if the propagation 
model is inaccurate by 6 dB (provided S/I = 17dB is the design requirement), then 
the signal-to-interference ratio, S/I, could be 23 dB or 11 dB. Based on traffic con- 
ditions, designing for a high S/I could negatively affect financial feasibility. On the 
other hand, designing for a low S/I would degrade the quality of service. 

The propagation model is also used in other system performance aspects 
including handoff optimization, power level adjustments, and antenna placements. 
Although no propagation model can account for all variations experienced in real 
life, it is essential that one should use several models for determining the path 
losses in the network. Each of the propagation models being used in the industry 
has pros and cons. It is through a better understanding of the limitations of each 
of the models that a good RF engineering design can be achieved in a network. 

We discuss two widely used empirical models: Okumura/Hata and COST 231 
models. The Okumura/Hata model has been used extensively both in Europe and 
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North America for cellular systems. The COST 231 model has been recommended 
by the European Telecommunication Standard Institute (ETSI) for use in Personal 
Communication Network/Personal Communication System (PCN/PCS). In addi- 
tion, we also present the empirical models proposed by International Mobile 
Telecommunication-2000 (IMT-2000) for the indoor office environment, outdoor 
to indoor pedestrian environment, and vehicular environment. 


3.9.1 Okumura/Hata Model 

Okumura analyzed path-loss characteristics based on a large amount of experimental 
data collected around Tokyo, Japan [6,11]. He selected propagation path conditions 
and obtained the average path-loss curves under flat urban areas. Then he applied 
several correction factors for other propagation conditions, such as: 


* Antenna height and carrier frequency 

* Suburban, quasi-open space, open space, or hilly terrain areas 
* Diffraction loss due to mountains 

* Sea or lake areas 

* Road slope 


Hata derived empirical formulas for the median path loss (150) to fit 
Okumura curves. Hata's equations are classified into three models: 


1. Typical Urban 


Lso(urban) = 69.55 + 26.16logf. + (44.9 — 6.55 log hp)logd 


— 13.82 logh, — a(hm)(dB) (3.25) 


where: 


а(Р,„) = correction factor (dB) for mobile antenna height as given by: 


* For large cities 
a(b,) = 8.29[log(1.54b,) — 11 f; = 200MHz (3.26) 
albm) = 3.2[log(11.75b,,)] — 4.97 fe = 400 MHz (3.27) 
* For small and medium-sized cities 


a(hm) = [1.1 log (f) — 0.7]5,, — [1.56 log (f,) — 0.8] (3.28) 
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2. Typical Suburban 


быйан dob aj E 54 di (3.29) 
3. Rural 
Lso = Lso(urban) — 4.78(logf.)? + 18.33 log f- — 40.94 dB (3.30) 
where: 


fe = carrier frequency (MHz) 

d - distance between base station and mobile (km) 
hy = base station antenna height (m) 

bm = mobile antenna height (m) 


The range of parameters for which the Hata model is valid is: 


150 = f, = 2200 MHz 
30 = by x 200m 

1= b, = 10m 
1<d=20km 


3.9.2 Cost 231 Model 

This model [19] is a combination of empirical and deterministic models for 
estimating the path loss in an urban area over the frequency range of 800 MHz to 
2000 MHz. The model is used primarily in Europe for the GSM 1800 system. 


Lso = Lf + Lus + Lms dB (3.31) 
or 


Lso = Lywhen Lys + Lms = 0 (3.32) 


where: 
Lf = free space loss (dB) 
Lits = roof top to street diffraction and scatter loss (dB) 
Lms = multiscreen loss (dB) 


Free space loss is given as: 
Lf = 32.4 + 20logd + 20logf.dB (3.33) 
The roof top to street diffraction and scatter loss is given as: 


Lis —16.9 —101og W + 10logf, + 20 log Ab, + Lo dB (3.34) 
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where: 
W = street width (m) 
Ab, = b, — bm m 


Lo = —10 + 0.3540 0z6z35? 

Lo = 2.5 + 0.075(ф — 35)dB 35° = ф= 55° 

Lo = 4 – 0.114(ф — 55) ав 55° = ф = 90° 
where 


Фф = incident angle relative to the street 
The multiscreen (multiscatter) loss is given as: 
Lms = Lpsn + Ra + Ralogd + kflog fe — 9logb (3.35) 

where: 

b = distance between building along radio path (m) 

d = separation between transmitter and receiver (km) 

Lp = —18log(11 + Ab) by = b, 

Lush = 0 рь <h, 


where: Ab, = рь — b, Б, = average building height (m) 


ka = 54 hy > b, 
ka 54 — 0.8рь d= 500m; hy <b, 
ka = 54 — 0.8Ahp(d/500) d< 500m; hy Sh, 


Note: Both Lysh and А, increase path loss with lower base station antenna heights. 


kg = 18 hy « b, 


15Ahy 
Ab, 


ky — 4 + 0.7(f-/925 — 1) for mid-size city and suburban area with moderate 
tree density 


Ёа= 18 — by = b, 


" fe 
kp= 4 + jo 


The range of parameters for which the COST 231 model is valid is: 


— 1] for metropolitan area 


800 =< f, = 2000 MHz 
4<hy=50m 
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15 5,31m 
0.02 <s d = 5 ка 


The following default values may be used in the model: 


b = 20-50m 
W = bn 
b = 90° 


Roof = 3m for pitched roof and 0m for flat roof, and 


b, = 3 (number of floors) + roof 


Example 3.7 


Using the Okumura and COST 231 models, calculate the Lso path loss for a PCS 
system in an urban area at 1, 2, 3, 4 and 5km distance (see Table 3.1). Assume 
рь = 30m, Р, = 2m, and carrier frequency fe = 900 MHz. Use the following data 
for the COST 231 model: 


W=15m, b=30m, ф = 90°, Р, = 30m 
COST 231 Model 


Lso = І; + Lust Lms 
Ly = 32.4 + 20logd + 20logf. = 32.4 + 20logd + 201og900 dB 
Lf = 91.48 + 20logddB 


La, = —16.9 — 10log + 10logf, + 20log Ahm + Lo 


Ahm = by — bm = 30 — 2 = 28 т 


Table 3.1 Summary of path losses from COST 231 model. 


d (km) Lr (dB) Lrts (dB) Lms (dB) о (dB) 
1 91.49 29.82 9.72 131.03 
2 97.50 29.82 15.14 142.46 
3 101.03 29.82 18.31 149.16 
4 103.55 29.82 20.56 153.91 
5 105.47 29.82 22.30 157.59 


Note: The table applies to this example only. 
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Lo = 4 — 0.114(ф — 55) = 4 — 0.114(90 — 55) = 0 
La = —16.9 — 10log15 + 1010g900 + 20log28 + 0 = 29.82 dB 
Lms = Lysh + Ra + Ralogd + Ков. — 9logb 


ka = 54 — 0.8рь = 54 — 0.8 x 30 = 30 


Арь = by — h, = 30 – 30 = 0m 


Lys = —18log11 + 0 = —18.75dB 


E 15Aby _ 15560... 
Ёа = 18 Ар, 18 28 18 
Е ЕЗ |= 900 4|. TN 
kp=4+ од 995 1|=4 + о.7(509 1) 3.98 (for mid-sized city) 


Lms —18.75 + 30 + 18logd + 3.9810g900 — 9log30 = 9.72 + 18logddB 
Okumura/Hata Model 


Lso = 69.55 + 26.16logf. + (44.9 — 6.55h,)logd — 13.82loghy — a(b,;) dB 
a(hm) = (1.1108. — 0.7)b,, — (1.56 log f. — 0.8) 

= (1.1log1800 — 0.7)(2) — (1.56 log 900 — 0.8) = 1.29dB 
Lso = 69.55 + 26.16 log 900 + (44.9 — 6.55 log 30)logd — 13.82log30 — 1.29dB 


= 125.13 + 35.23 logd dB (refer to Table 3.2) 


The results from the two models are given in Figure 3.9. Note that the 
calculated path loss with the COST 231 model is higher than the value obtained 
by the Okumura/Hata model. 


Table 3.2 Summary of path losses from Okumura model. 


d (km) Lso (dB) 
1 125.13 
2 135.74 
3 141.94 
4 142.34 
5 145.76 
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Figure 3.9 Comparison of COST 231 and Hata-Okumura models. 


3.9.3 IMT-2000 Models 

The operating environments are identified by appropriate subsets consisting of 
indoor office environments, outdoor to indoor and pedestrian environments, and 
vehicular (moving vehicle) environments. For narrowband technologies (such as 
FDMA and TDMA), delay spread is characterized by its rms value alone. However, 
for wide band technologies (such as CDMA), the strength and relative time delay of 
the many signal components become important. In addition, for some technologies 
(e.g., those using power control) the path-loss models must include the coupling 
between all co-channel propagation links to provide accurate predictions. Also, 
in some cases, the shadow effect temporal variations of the environment must be 
modeled. The key parameters of the IMT-2000 propagation models are: 


* Delay spread, its structure, and its statistical variation 


Geometrical path loss rule (e.g., d *, 2 = y = 5) 
* Shadow fading margin 


Multipath fading characteristics (e.g., Doppler spectrum, Rician vs. Rayleigh 
for envelope of channels) 


* Operating radio frequency 
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Indoor Office Environment 

This environment is characterized by small cells and low transmit powers. Both 
base stations and pedestrian users are located indoors. RMS delay spread ranges 
from around 35nsec to 460nsec. The path loss rule varies due to scatter and 
attenuation by walls, floors, and metallic structures such as partition and filing 
cabinets. These objects also produce shadowing effects. A lognormal shadowing 
with a standard deviation of 12 dB can be expected. Fading characteristic ranges 
from Rician to Rayleigh with Doppler frequency offsets are determined by walk- 
ing speeds. Path-loss model for this environment is: 


Lso = 37 + 30logd + 18.3 · nl» + 2/» + 0 - o46lgB (3.36) 


where: 
d — separation between transmitter and receiver (m) 
n — number of floors in the path 


Outdoor to Indoor and Pedestrian Environment 

This environment is characterized by small cells and low transmit power. Base 
stations with low antenna heights are located outdoors. Pedestrian users are 
located on streets and inside buildings. Coverage into buildings in high power sys- 
tems is included in the vehicular environment. RMS delay spread varies from 100 
to 1800 пѕес. A geometric path-loss rule of d^ * is applicable. If the path is a line- 
of-sight on a canyon-like street, the path loss follows a rule of d ?, where there is 
Fresnel zone clearance. For the region with longer Fresnel zone clearance, a path 
loss rule of d~* is appropriate, but a range of up to 27% may be encountered due 
to trees and other obstructions along the path. Lognormal shadow fading with 
a standard deviation of 10 dB is reasonable for outdoors and 12 dB for indoors. 
Average building penetration loss of 18dB with a standard deviation of 10dB 
is appropriate. Rayleigh and/or Rician fading rates are generally set by walking 
speeds, but faster fading due to reflections from moving vehicles may occur some- 
times. The following path-loss model has been suggested for this environment: 


Lso = 40logd + 30logf, + 49dB (3.37) 


This model is valid for non-line-of-sight (NLOS) cases only and describes 
the worst-case propagation. Lognormal shadow fading with a standard deviation 
equal to 10dB is assumed. The average building penetration loss is 18 dB with a 
standard deviation of 10 dB. 


Vehicular Environment 

This environment consists of larger cells and higher transmit power. RMS delay 
spread from 4 microseconds to about 12 microseconds on elevated roads in hilly or 
mountainous terrain may occur. A geometric path-loss rule of d~* and lognormal 
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shadow fading with a standard deviation of 10dB are used in the urban and 
suburban areas. Building penetration loss averages 18 dB with a 10dB standard 
deviation. 

In rural areas with flat terrain the path loss is lower than that of urban 
and suburban areas. In mountainous terrain, if path blockages are avoided by 
selecting base station locations, the path-loss rule is closer to d~*. Rayleigh fad- 
ing rates are determined by vehicle speeds. Lower fading rates are appropriate for 
applications using stationary terminals. The following path-loss model is used in 
this environment: 


Lso = 40(1 — 4 x 10 ?Abj)logd — 18log(Ahp) + 21logf, + 80dB (3.38) 


where: 
Ah, = base station antenna height measured from average roof top level (m) 


Delay Spread 

A majority of the time rms delay spreads are relatively small, but occasionally, 
there are *worst case" multipath characteristics that lead to much larger rms delay 
spreads. Measurements in outdoor environments show that rms delay spread can 
vary over an order of magnitude within the same environment. Delay spreads 
can have a major impact on the system performance. To accurately evaluate the 
relative performance of radio transmission technologies, it is important to model 
the variability of delay spread as well as the *worst case" locations where delay 
spread is relatively large. For each environment IMT-2000 defines three multipath 
channels: low delay spread, median delay spread, and high delay spread. Channel 
“A” represents the low delay spread case that occurs frequently; channel “B” cor- 
responds to the median delay spread case that also occurs frequently; and channel 
*C" is the high delay spread case that occurs only rarely. Table 3.3 provides the 
rms values of delay spread for each channel and for each environment. 


Table 3.3 Rms delay spread (IMT-2000). 


Channel "A" Channel "B" Channel "C" 


Environment ^7rms(ns) % Occurrence trms(ns) % Occurrence trms(ns) 96 Occurrence 


Indoor office 35 50 100 45 460 5 
Outdoor to 100 40 750 55 1800 5 
indoor and 

pedestrian 

Vehicular 400 40 4000 55 12,000 5 
(high 


antenna) 
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3.10 Indoor Path-Loss Models 


Picocells cover part of a building and span from 30 to 100 meters [13,15]. They 
are used for WLANs апа PCSs operating in the indoor environment. The path-loss 
model for a picocell is given as: 


Lp = Lp(do) + 10ylogd + Іп) + X, dB (3.39) 


Lp(do) = reference path loss at the first meter (dB) 


y — path-loss exponent 
d — distance between transmitter and receiver (m) 
X, = shadowing effect (dB) 


Lr(n) = signal attenuation through и floors 


Indoor-radio measurements at 900 MHz and 1.7 GHz values of Lr per floor are 
10dB and 16 dB, respectively. Table 3.4 lists the values of Lp(do), (п), y, and Xo. 
Partition dependent losses for signal attenuation at 2.4 GHz are given in Table 3.5. 


Table 3.4. Values of Lp do), y, (п) and X, in Equation 3.39. 


Environment Residential Office Commercial 
L,(do) (dB) 38 38 38 
y 2.8 3.0 2.2 

L¢(n) (dB) 4n 15 + 4(n — 1) 6 + 3(n — 1) 
Xo (dB) 8 10 10 


Table 3.5 Partition dependent losses at 2.4 GHz. 


Signal attenuation through Loss (dB) 
Window in brick wall 2 
Metal frame, glass wall in 6 
building 

Office wall 


Metal door in office wall 
Cinder wall 4 
Metal door in brick wall 12.4 


Brick wall next to metal door 3 
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Femtocellular systems span from a few meters to a few tens of meters. They 
exist in individual residences and use low-power devices using Bluetooth chips or 
Home RF equipment. The data rate is around 1 Mbps. Femtocellular systems use 
carrier frequencies in the unlicensed bands at 2.4 and 5 GHz. Table 3.6 lists the 
values of Lp(do) and y for LOS and NLOS conditions. 


Example 3.8 

In a WLAN the minimum SNR required is 12dB for an office environment. 
The background noise at the operational frequency is —115 dBm. If the mobile 
terminal transmit power is 100 mW, what is the coverage radius of an access point 
if there are three floors between the mobile transmitter and the access point? 


Solution 
e Transmit power of mobile terminal = 10log100 = 20 dBm 
* Receiver sensitivity = background noise + minimum SNR = —115 + 12 
= —103dB 


* Maximum allowable path loss = transmit power — receiver sensitivity 
= 20 — (—103) = 123 dB 
e Lp(do) = 38dB, Ly(n) = 15 + 4(3 — 1) = 23dB, y = 3, and X, = 10dB 
(from Table 3.4) 


Maximum allowable path loss = 123 = 38 + 23 + 10 + 30logd 


d=54m 


3.11 Fade Margin 


As we discussed earlier, the local mean signal strength in a given area at a fixed 
radius, R, from a particular base station antenna is lognormally distributed [7]. 
The local mean (i.e., the average signal strength) in dB is expressed by a normal 
random variable with a mean Sm (measured in dBm) and standard deviation o; (dB). 
If Smin is the receiver sensitivity, we determine the fraction of the locations (at 
d = R) wherein a mobile would experience a received signal above the receiver 
sensitivity. The receiver sensitivity is the value that provides an acceptable signal 
under Rayleigh fading conditions. The probability distribution function for a log- 
normally distributed random variable is: 


p(S) = — eliS - 5,22) (3.40) 
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Table 3.6 Values of A and y for femtocellular systems. 


Center 7 

Environment frequency (GHz) Scenario Lp(do)(dB) Y 
Indoor office 2.4 LOS 41.5 2.0 

NLOS 37.7 3.3 
Meeting room 5.1 LOS 46.6 2.22 

NLOS 61.6 2.22 
Suburban 5.2 LOS (same 47 2to3 
residence floor) 

NLOS (same 4to5 

floor) 

NLOS & room 4to6 


in higher floor 
directly above 
Tx 


NLOS & room 6to7 
in higher floor 

not directly 

above Tx 


The probability for signal strength exceeding receiver sensitivity Р; (К) is 
given as 


© 


Ps,,(R) = PIS = Smin] = |. p(S)dS = 1-1 erf [im (3.41) 


9min 


Note: See Appendix D for erf, erfc and Q functions. 


Example 3.9 

If the mean signal strength and receiver sensitivity are —100 dBm and —110 dBm, 
respectively and the standard deviation is 10dB, calculate the probability for 
exceeding signal strength beyond the receiver sensitivity. 


Solution 


1 4 1 4110-100). E 
1 ре 5 | 0.5 + 0.5 erf(0.707) = 0.84 
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Next, we determine the fraction of the coverage within an area in which the 
received signal strength from a radiating base station antenna exceeds Smin. We 
define the fraction of the useful service area F, as that area, within an area for 
which the signal strength received Бу a mobile antenna exceeds Smin. If Ps, is the 
probability that the received signal exceeds Smin іп an incremental area dA, then 


EL [Ps „dA (3.42) 
Using the power law we express mean signal strength Sm as 
"X d 
Sim = а 10ylog Б: (3.43) 


where o accounts for the transmitter effective radiated power (ERP), receiver 
antenna gain, feed line losses, etc. 


Substituting Equation 3.43 into 3.41 we get: 


_1_1 Smin — a + 10ylog(d/R) 
Ps Б? erf 20 (3.44) 
Let a = (Smin — о)/(0;У2) and b = (10ylog (d/R))/(o.V2) 
Substituting Equation 3.44 into 3.42, we get 
“B= i — x Я х{ег а + blog (x/R)]}dx (3.45) 
Let = a + blog(x/R), then 
pond 1а [ „2% 
Fy c i-le КОЛ (3.46) 
ог 
F, = 11 — erf(a) + et- меп = et 12 52 | (3.47) 
If we choose a such that $,, = Smin at d = R, then a = 0 and 
1 2 
Е, = IA +e" [1 — erf(1/6)]]| (3.48) 


Figure 3.10 shows the relation in terms of the parameter o;/y. 
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Figure 3.10 Fraction of total area with average power above threshold. 


(After: W. C. Jakes, Jr., (editor), Microwave Mobile Communications. New York: John Wiley & Sons, 
1974, p. 127) 


3.12 Link Margin 


To consider the losses incurred in transmitting a signal from point A to point B, 
we start by adding all the gains and losses in the link to estimate the total overall 
link performance margin [4]. 

The receiver power Р, is given as: 


Pu 
Heec 


(3.49) 


where: 
Р, is the transmitter power 
G; and С, are the gains of transmitter and receiver 
Ly is the path loss between the transmitter and receiver. 


In addition, there are also the effects due to receiver thermal noise, which 
is generated due to random noise inherent within a receiver's electronics. This 
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increases with temperature. We account for this thermal noise effect with the 
following: 


N = kTBy, (3.50) 


where: 
k = Boltzmann's constant (1.38 x 10723 W/Kelvin-Hz) 
T = temperature in Kelvin 
B, = receiver bandwidth(Hz). 


Spectral noise density, No, is the ratio of thermal noise to receiver band- 
width 


No = NIB, = kT (3.51) 


Finally, there is an effect on signal-to-noise (SNR) ratio due to the quality of 
the components used in the receiver’s amplifiers, local oscillators (LOs), mixers, 
etc. The most basic description of a component’s quality is its noise figure, Nf 
which is the ratio of the SNR at the input of the device versus the SNR at its out- 
put. The overall composite effect of several amplifiers’ noise figures is cumulative, 
and can be obtained as: 


Миша! = Ма + (Np = 1/G1 + (Ng — 1)(GiG2) + ++: (3.52) 


where: 
Ме is the noise figure in stage k 
Сі = gain of the kth stage. 


By combining all the factors, we can develop a relation that allows us to 
calculate the overall link margin 


P;,G;G,A 
M- DUI (3.53) 


Eb 
N ota TkL LfLoFmargin R| — 
f. total 4 pf L0. g COM 


where: 
Ag — gain of receiver amplifier in dB 
R = data rate in dB 
Fmargin = fade margin in dB 
Tk = noise temperature in Kelvin 
(Eo/No)reqd = required value in dB 
Ly — path losses in dB 
Lr = antenna feed line loss in dB 
Lo — other losses in dB 
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Expressing Equation 3.53 in dB, we obtain 


М = P, + G+ G, + Ag = Ny total — Tk Lp Lr Lo Fmargin 


— R – (Ep/No)reqa dB (3.54) 


Example 3.10 


Given a flat rural environment with a path loss of 140 dB, a frequency of 900 MHz, 
8dB transmit antenna gain and 0 dB receive antenna gain, data rate of 9.6kbps, 
12. dB in antenna feed line loss, 20dB in other losses, a fade margin of 8dB, a 
required E,/No of 10dB, receiver amplifier gain of 24 dB, noise figure total of 
6 dB, and a noise temperature of 290K, find the total transmit power required of 
the transmitter in watts for a link margin of 8 dB. 


k = 101og(1.38 x 10723) = —228.6dBW 
Lp = 140dB; Ag = 24dB; № = 6dB; Fmargin = 8dB; С, = 8dB; С, = OdB; 
Lo = 20dB; Lfea = 12dB; Т = 24.6dB; К = 39.8 dB; (Ep/No)reqa = 10 dB; 
and M = 8dB 
From Equation (3.54) 


Py =M- G,- G, — Ag + Ne total + T +k + Lp + Le + Lo + Fmnargin + R 


+ (Ep! No)reqd 


P, = 8 — 8 — 0 — 24 + 6 + (24.6 — 228.6) + 140 + 12 + 20 + 8 + 39.8 + 10 


— 7.8dBW 


ЛР, = 10078 = 6 W 


3.13 Summary 


In this chapter we discussed propagation and multipath characteristics of a radio 
channel. The concepts of delay spread that causes channel dispersion and inter- 
symbol interference were also presented. Since the mathematical modeling of the 
propagation of radio waves in a real world environment is complicated, empiri- 
cal models were developed by several authors. We presented these empirical and 
semi-empirical models used for calculating the path losses in urban, suburban, 
and rural environments and compared the results obtained with each model. Dop- 
pler spread, coherence bandwidth, and time dispersion were also discussed. The 
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forward error correcting algorithms [3] for improving radio channel performances 
are given in Chapter 8. 


Problems 


3.1 
3.2 
3.3 
3.4 


3.5 


3.6 


3.7 


3.8 


3.9 


3.10 


Define slow and fast fading. 
What is a frequency selective channel? 
Define receiver sensitivity. 


A vehicle travels at a speed of 30m/s and uses a carrier frequency of 
1 GHz. What is the maximum Doppler shift? What is the approximate 
fade duration? 


A mobile station traveling at 30 km per hour receives a flat Rayleigh fading 
signal at 800 MHz. Determine the number of fades per second above the 
rms level. What is the average duration of fade below the rms level? What 
is the average duration of fade at a level 20dB below the rms level? 


Find the received power for the link from a synchronous satellite to a 
terrestrial antenna. Use the following data: height = 60,000 km; satellite 
transmit power = 4 W; transmit antenna gain = 18 dBi; receive antenna 
gain = 50dBi; and transmit frequency = 12 GHz. 


Determine the SNR for the spacecraft that uses a transmitter power of 
16 W at a frequency of 2.4 GHz. The transmitter and receiver antenna 
gain are 28 dBi and 60 dBi, respectively. The distance from the space- 
craft to ground is 2 X 1019 m, the effective noise temperature of antenna 
plus receiver is 14 degrees Kelvin, and a bit rate of 120 kbps. Assume 
the bandwidth of the system to be half of the bit rate, 60 kHz. 


A base station transmits a power of 10 W into a feeder cable with a loss 
of cable 10 dB. The transmit antenna has a gain of 12 dBi in the direction 
of the mobile receiver with a gain of 0 dBi and feeder loss of 2dB. The 
mobile receiver has a sensitivity of —104 dBm. (a) Determine the effec- 
tive isotropic radiated power, and (b) maximum acceptable path loss. 


A receiver in a digital mobile communication system has a noise band- 
width of 200 kHz and requires that its input signal-to-noise ratio should 
be at least 10 dB when the input signal is 104 dBm. (a) What is the 
maximum permitted value of the receiver noise figure, and (b) What is 
the equivalent input noise temperature? 


Calculate the maximum range of the communication system in Problem 8, 
assuming a mobile antenna height (Р) of 1.5 т, a base station antenna 
height (55) of 30 m, a frequency equal to 900 MHz and propagation that 
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3.11 


3.12 


3.13 


3.14 


3.15 


takes place over a plane earth. Assume base station and mobile station 
antenna gains to be 12 dBi and OdBi, respectively. How will this range 
change if the base station antenna height is doubled? 


A mobile station traveling at a speed of 60 km/h transmits at 900 MHz. 
If it receives or transmits data at a rate of 64 kbps, is the channel fading 
slow or fast? 


The power received at a mobile station is lognormal with a standard 
deviation of 8 dB. Calculate the outage probability assuming the average 
received power is —96 dBm and the threshold power is – 100 dBm. 


Determine the minimum signal power for an acceptable voice quality 
at the base station receiver of a GSM system (bandwidth 200 kHz, data 
rate 271 kbps). Assume the following data: Receiver noise figure — 5 dB, 
Boltzmann’s constant = 1.38 х 10 ??Joules/K, mobile radiated power 
— 30dBm, transmitter cable losses — 3dB, base station antenna gain 
= 16dBi, mobile antenna gain = OdBi, fade margin = 10.5 dB, and 
required Ep/No = 13.5 dB. What is the maximum allowable path loss? 
What is the maximum cell radius in an urban area where a 1km inter- 
cept is 108 dB and the path-loss exponent is 4.2? 


Develop a MATLAB program and obtain a curve for maximum path 
loss versus cell radius. Test your program using the following data: base 
station transmit power = 10 W, base station cable loss = 10dB, base 
station antenna gain = 8 dBi, base station antenna height = 15 m, mobile 
station antenna gain = OdBi, mobile station antenna height = 1m, body 
and matching loss = 6 dB, receiver noise bandwidth = 200 KHz, receiver 
noise figure = 7 dB, noise density = —174 dBm/Hz, required SNR = 9 dB, 
building penetration loss = 12 dB, and fade margin = 10 4В. 


In the Bluetooth device with NLOS, S/N required is 10dB in an indoor office 
environment. The background noise at the operating frequency is - 80 dBm. 
If the transmit power of the device is 20 dBm, what is its coverage? 
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CHAPTER 4 


An Overview of Digital 
Communication and Transmission 


4.1 Introduction 

The basic part of any digital communication system is the communication channel. 
This is the physical medium that carries information bearing signals from the 
source of the information to the sink. In a radio system the communication chan- 
nel is the propagation of radio waves in free space (see Figure 4.1). As discussed in 
Chapter 3, radio waves in free space are subjected to fading. In nearly all commu- 
nication systems some equipment is required to convert the information-bearing 
signal into a suitable form for transmission over the communication channel and 
then back into a form that is comprehensible to the end-user. This equipment 
is the transmitter and receiver. The receiver does not only perform the inverse 
translation to the transmitter, but it also has to overcome the distortions and dis- 
turbances (see Chapter 3) that occur over the communication channel. Thus, it 
is often more difficult to design the receiver than the transmitter. Speech coding, 
forward-error-correcting (FEC) coding, bit-interleaving, diversity, equalization, 
and modulation play important roles in a communication system, particularly in 
a radio system (see Chapters 7, 8, and 9). 

The transmitter for a radio system consists of antenna, RF section, encoder, 
and modulator. An antenna converts the electrical signal into a radio wave propa- 
gating in free space. The RF section of the transmitter generates a signal of suf- 
ficient power at the required frequency. It typically consists of a power amplifier, 
a local oscillator, and an up-converter. However, generally the RF section only 
amplifies and frequency-converts a signal (see Figure 4.2). 

At the input of the transmitter the user interface interacts and converts the 
information into a suitable digital data stream. The information source can be 
analog (such as speech) or discrete (such as data). Analog information is converted 
into digital information through the use of sampling and quantization. Sampling, 
quantization, and encoding techniques are called formatting and source coding. 

The source encoder and modulator bridge the gap between the digital data 
and electrical signal required at the input to the RF section. The encoder converts 
the data stream into a form that is more resistant to the degradations introduced 
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Figure 4.1 Overview of a communication system. 
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Figure 4.2 Structure of the transmitter for a radio system. 


by the communication channel (see Chapter 3). The modulator takes a sine wave 
at the required carrier frequency and modifies the signal characteristics. We may 
regard the encoder/modulator as a single subsystem that maps data presented 
to it by the user interface onto a modulated RF carrier for subsequent process- 
ing, amplification, and transmission by the RF section. The demodulator/decoder 
takes the received RF signal and performs the inverse mapping back to the data 
stream for onward transmission. 

The encoder/modulator determines the bandwidth occupied by the trans- 
mitted signal. The demodulator/decoder determines the quality of the resulting 
service, in terms of bit-error-rate (BER), availability and delay. These subsystems 
also determine the robustness of the communication system to channel impair- 
ments due to the RF subsystem (such as phase noise and nonlinearity) and RF 
channel (such as multipath dispersion and fading, discussed in Chapter 3). There- 
fore, the correct choice of the coding/modulation scheme is vital for efficient 
operation of the whole system. In addition to coding/modulation, other means 
for improving signal quality in a wireless system include the speech coding, bit- 
interleaving, equalization, and diversity [4,6,9,10,14,16]. 

The basic objective of this chapter is to familiarize the readers who are not 
exposed to digital communications. The chapter may be omitted by the students 
who have been exposed to digital communications course(s). Details of techniques 
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Figure 4.3 Formatting, transmission, and reception of baseband signals. 


such as speech/channel coding, bit-interleaving, modulation, diversity, and the 
antenna used for improving signal quality are discussed in Chapters 7, 8, and 9. 

This chapter focuses only on the performance parameters of coding and the 
modulation scheme. It outlines the OSI layers, types of data services, and dis- 
cusses briefly transmission media to familiarize the readers. 


4.2 Baseband Systems 

Source information may contain either analog, textual, or digital data. Formatting 
involves sampling, quantization, and encoding. It is used to make the message com- 
patible with digital processing. Transmit formatting transforms source information 
into digital symbols. When data compression is used in addition to formatting, the 
process is referred to as source coding. Figure 4.3 shows a functional diagram that 
primarily focuses on the formatting and transmission of baseband (information 
bearing) signals. The receiver with a detector followed by a signal decoder per- 
forms two main functions: (1) does reverse operations performed in the transmit- 
ter, and (2) minimizes the effect of channel noise for the transmitted symbol. 


4.3 Messages, Characters, and Symbols 


During digital transmission the characters are first encoded into a sequence of bits, 
called a bit stream or baseband signal. Groups of b bits form a finite symbol set or 
word M (= 2°) of such symbols [14,17]. A system using a symbol set size of M is 
referred to as an M-ary system. The value of b or M is an important initial choice 
in the design of any digital communication system. For b — 1, the system is called a 
binary system, the size of symbol set M is 2, and the modulator uses two different 
waveforms to represent the binary “1” and the binary “0” (see Figure 4.4). In this 
case, the symbol rate and the bit rate are the same. For b — 2, the system is called 
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Figure 4.4 Binary and quatenary systems. 


quatenary or 4-ary (M = 4) system. At each symbol time, the modulator uses one 
of the four different waveforms that represents the symbol (see Figure 4.4). 


4.4 Sampling Process 
The analog information is transformed into a digital format. The process starts 
with sampling the waveform to produce a discrete pulse-amplitude-modulated 
waveform (see Figure 4.5) [6,16,17]. The sampling process is usually described in 
time domain. This operation is basic to digital signal processing and digital com- 
munication. Using the sampling process, we convert the analog signal into cor- 
responding sequences of samples that are usually spaced uniformly in time. The 
sampling process can be implemented in several ways, the most popular being the 
sample-and-hold operation. In this operation, a switch and storage mechanism 
(such as a transistor and a capacitor, or shutter and a filmstrip) form a sequence of 
samples of the continuous input waveform. The output of the sampling process is 
called pulse amplitude modulation (PAM) (see Section 4.6) because the successive 
output intervals can be described as a sequence of pulses with amplitudes derived 
from the input waveform samples. The analog waveform can be retrieved from a 
PAM waveform by simple low-pass filtering provided we choose the sampling rate 
properly. The ideal form of sampling is called instantaneous sampling. 

We sample the signal s(t) instantaneously at a uniform rate, fs, once every T; 
(1/f;) seconds. Thus, we obtain: 


sat) = >, s(nT.)8(t — nT.) (4.1) 


where: 
Sa(£) is the ideal sampled signal 
o(t — nT;) is the delta function positioned at time t = zT; 


A delta function is closely approximated by a rectangular pulse of duration 
At and amplitude s(nT;)/At; the smaller At the better the approximation. 
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Figure 4.5 Sampling process. 


We determine the Fourier transform of the ideal sampled signal ss(t) by using 
the duality property of the Fourier transform and the fact that a delta function is 
an even function [6] as: 


salt) ef, Sif mf) (42) 


where: 
S(f) is the Fourier transform of the original signal s(t) and f, is the sampling rate. 


Equation 4.2 states that the process of uniformly sampling a continuous- 
time signal of finite energy results in a periodic spectrum with a period equal to 
the sampling rate. 

Taking the Fourier transform of both sides of Equation 4.1 and noting that 
the Fourier transform of the delta function 8(t — nT.) is equal to е2", we get 


© 


Sf) >, ие", (4.3) 


п=—® 


Equation 4.3 is called the discrete-time Fourier transform. It is the complex 
Fourier series representation of the periodic frequency function Sa(f), with the 
sequence of samples {s(#T,)} defining the coefficients of the expansion. 

From Equation 4.2, we see that the Fourier transform of s(t) may also be 
expressed as: 


© 


Sf) = Б) +; >, Sf тр) (444) 


m--—o,ms0 


Next, we consider a continuous-time signal s(t) of finite energy and infi- 
nite duration. The signal is strictly band-limited with no frequency component 
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higher than B,, Hz. This implies that the Fourier transform S(f) of the signal s(t) 
has the property that S(f) is zero for Ifl = B,,. If we choose the sampling period 
Т; = 1/(2B,,), then the corresponding spectrum is given as: 


оо (іти) 
50) = >, zs.) UR (4.5) 
Using the following two conditions: 
1. S(f) = 0 for Ifl = B, and 
2. f, - 2B, 
We find from Equation 4.4 
1 
S(f)= ZB Salf), ^ By, € f < Bw (4.6) 


Substituting Equation 4.5 into Equation 4.6, we can write 


Gu. Y quy 


Thus, if the sample value s(7/2B,,) of a signal s(t) is specified for all n, then the 
Fourier transform S(f) of the signal is uniquely determined by using the discrete- 
time Fourier transform of Equation 4.7. Because s(t) is related to S(f) by inverse 
Fourier transform, it follows that the signal s(t) is itself uniquely determined by the 
sample values s(7/2B,,) for —% <n < ©, In other words, the sequence {s(7/2B,,)} 
has all the information contained in s(t). 

We state the sampling theorem for band-limited signals of finite energy in 
two parts, which apply to the transmitter and receiver of a pulse modulation 
system, respectively. 


m Д 


, -В„< {< By (4.7) 


1. A band-limited signal of finite energy with no frequency components higher 
than B,, Hz is completely described by specifying the values of signals at 
instants of time separated by 1/(2B,,) seconds. 


2. A band-limited signal of finite energy with no frequency components higher 
than B,, Hz, may be completely recovered from a knowledge of its samples 
taken at the rate of 2B,, samples per second. 


This is known as the uniform sampling theorem. The sampling rate of 2B,, 
samples per second for a signal bandwidth Bw Hz, is called the Nyquist rate and 
1/(2B,,) second is called the Nyquist interval [8]. 

We discussed the sampling theorem by assuming that signal s(t) is strictly 
band limited. In practice, however, an information-bearing signal is not strictly 
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band limited, with the result that some degree of undersampling is encountered. 
Consequently, some aliasing is produced by the sampling process. Aliasing refers 
to the phenomenon of a high-frequency component in the spectrum of the signal 
seemingly taking on the identity of a lower frequency in the spectrum of its 
sampled version. 


4.4.1 Aliasing 
Figure 4.6 shows the part of the spectrum that is aliased due to undersampling [13]. 
The aliased spectral components represent ambiguous data that can be retrieved 
only under special conditions. In general, the ambiguity is not resolved and ambig- 
uous data appears in the frequency band between (f, — fin) and fin, where f,,is the 
maximum frequency and f, is the sampling rate. 

In Figure 4.7 we use the higher sampling rate /;' to eliminate the aliasing by 
separating the spectral replicas. Figures 4.8 and 4.9 show two ways to eliminate 


» 
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Figure 4.6 Sampled signal spectrum. 


Figure 4.7 Higher sampling rate to eliminate aliasing. 
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Figure 4.9 Post-filter to eliminate aliasing portion of the spectrum. 


aliasing using anti-aliasing filters. The analog signal is prefiltered so that the new 
maximum frequency fm is less than or equal to /;/2. Thus there are no alias- 
ing components seen in Figure 4.8, since fs > 2fm'. Eliminating aliasing terms 
prior to sampling is good engineering practice. When the signal structure is well 
known, the aliased terms can be eliminated after sampling with a linear pass fil- 
ter (LPF) operating on the sampled data. In this case the aliased components are 
removed by post-filtering after sampling. The filter cutoff frequency fm’ removes 
the aliased components; f, needs to be less than (fs — fm). It should be noted that 
filtering techniques for eliminating the aliased portion of the spectrum will result 
in a loss of some of the signal information. For this reason, the sample rate, cut- 
off bandwidth, and filter type selected for a particular signal bandwidth are all 
interrelated. 


4.4 Sampling Process 93 


Realizable filters require a non-zero bandwidth for the transition between the 
passband and the required out-of-band attenuation. This is called the transition 
bandwidth. To minimize the system sample rate, we want the anti-aliasing filter 
to have a small transition bandwidth. Filter complexity and cost increase sharply 
with a narrower transition bandwidth, so a trade-off is required between the cost 
of a small transition bandwidth and the costs of the higher sampling rate, which 
are those of more storage and higher transition rates. 

In many systems the answer is to make the transition bandwidth 10 to 20% 
of the signal bandwidth. If we account for a 20% transition bandwidth of the 
anti-aliasing filter, we have an engineering version of the Nyquist sampling rate: 
fe mE. 


Example 4.1 


What should be the sampling rates to produce a high-quality digitalization of a 
20-kHz bandwidth music signal? 


Solution 
A sampling rate, of =44ksps should be used. 


The sampling rate for a compact disc digital audio player = 44.1 ksps and 
for a studio-quality audio player — 48 ksps are used. 


4.4.2 Quantization 

In Figure 4.10, each pulse is expressed as a level from a finite number of predeter- 
mined levels; each level can be represented by a symbol from a finite alphabet. The 
pulses in Figure 4.10 are called quantized samples. When the sample values are 
quantized to a finite set, this format can interface with a digital system. After quan- 
tization, the analog waveform can still be recovered, but not precisely; improved 
reconstruction fidelity of the analog waveform can be achieved by increasing the 
number of quantization levels (requiring increased system bandwidth). 


A S(t) 


A nie б 


Figure 4.10 Flat-top quantization. 
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4.4.3 Sources of Error 

The quantization process introduces an error defined as the difference between 
the input and output signal. The error is referred to as quantization noise. Other 
sources of error are due to sampling and channel condition [2,13]. 


Quantization Noise 

The distortion inherent in quantization is a round-off or truncation error. The 
process of encoding the pulse amplitude modulation (PAM) waveform into a 
quantized waveform involves discarding some of the original analog information. 
This distortion is called quantization noise; the amount of such noise is inversely 
proportional to the number of quantization levels used in the process. 


Quantizer Saturation 

The quantizer allocates L levels to the task of approximating the continuous range of 
inputs with a finite set of outputs. The range of inputs for which the difference between 
the input and output is small is called the operating range of the converter. If the input 
exceeds this range, the difference between the input and output becomes large and 
we say that the converter is operating in saturation mode. Saturation errors are more 
objectionable than quantizing noise. Generally, saturation is avoided by use of auto- 
matic gain control, which effectively extends the operating range of the converter. 


Timing Jitter 

If there is a slight jitter in the position of the sample, the sampling is no longer uni- 
form. The effect of the jitter is equivalent to frequency modulation of the baseband 
signal. If the jitter is random, a low-level wide band spectral contribution is induced 
whose properties are very close to those of the quantizing noise. Timing jitter can 
be controlled with good power supply isolation and stable clock reference. 


Channel Noise 

Thermal noise, interference from other users, and interference from circuit 
switching transients can cause errors in detecting the pulses carrying the digitized 
samples. Channel-induced errors can degrade the reconstructed signal quality quite 
significantly. The rapid degradation of the output signal quality with channel- 
induced errors is called a threshold effect. 


Inter-Symbol Interference 

A bandwidth-limited channel spreads a pulse waveform passing through it. When 
the channel bandwidth is much greater than the pulse bandwidth, the spread- 
ing of the pulse will be slight. When the channel bandwidth is close to the signal 
bandwidth, the spreading will exceed a symbol duration and cause signal pulses to 
overlap. This overlapping is called inter-symbol interference (ISI) (see Chapter 3). 
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ISI causes system degradation (higher bit-error-rate); it is a particularly insidious 
form of interference because raising the signal power to overcome interference will 
not improve the error performance. 


4.4.4 Uniform Quantization 
We consider a uniform quantization process as shown in Figure 4.11. With the 
quantizer input having zero mean, and the quantizer being symmetric, the quan- 
tizer output and quantization error will also have zero mean. 

Since the mean of quantization error e is zero, its variance will be: 


4/2. 


о? = [ера = 


2 
e(1 de =1 = Average quantization noise power 
—qi2 q 12 


where: 
p(e) = probability of error = 1/4 ( for uniform distribution of quantization 
error) 
о? = variance of the average quantization noise power 
L — number of quantization levels. 


22 
Signal power = (Vj? | wm} EI = s (4.8) 


where: 
Vpp = peak-to-peak voltage range 


SNR = Signal power NU 
Average quantization noise power o? 
N ———— 
A A 
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Figure 4.11 Uniform quantization. 
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a(s) = C) — 372 (4.9) 
q 4/12, 


With L = 2^, R = bits per sample, we obtain 


Let P denote the average power of the message signal s(t), then 


Ле” 


278) (4.10) 


The output signal-to-noise ratio (SNR) of the quantizer increases exponen- 
tially with increasing number of bits per sample, R. An increase in R requires a 
proportionate increase in the channel bandwidth. 

In the limit as L — ©, the signal approaches the PAM format (with no 
quantization error) and signal-to-quantization noise ratio is infinite. In other words, 
with an infinite number of quantization levels, there is no quantization error. 


Example 4.2 
We consider a full-load sinusodial modulating signal of amplitude A, which uses 


all representation levels provided. If the average signal power corresponds to a 
load of 1 Ohm, determine the SNR for L — 32, 64, 128, and 256. 


Solution 
_ А? 
iem 
j= 3422728 
А2 
ES 127 — 3/52R\ — + 
(SNR); aca 5 (2 ) = 1.8 + 6RdB 
3 
L2 R (bits) (SNR)4(dB) 

32 5 31.8 
64 6 37.8 
128 7 43.8 
256 8 49.8 


4.5 Voice Communication 97 


4.5 Voice Communication 


For most voice communication, very low speech volumes predominate: 50% of 
the time, the voltage characterizing detected speech energy is less than 1/4 of the 
rms value of the voltage. Large amplitude values are relatively rare: only 1596 of 
the time does the voltage exceed the rms value. Uniform quantization would be 
wasteful for speech signals; many of the quantizing steps would rarely be used. 
In a system that uses equally spaced quantization levels, the quantization noise 
is the same for all signal magnitudes because noise depends on the step size of 
quantization. The uniform quantization results in poor signal to quantization 
noise ratios for low-amplitude signals. Nonuniform quantization can provide 
better quantization of the weak signals and coarse quantization of the strong 
signals. Thus, in the case of nonuniform quantization, quantization noise can be 
made proportional to signal magnitude. The effect is to improve overall SNR by 
reducing the noise for predominant weak signals, at the expense of an increase 
in noise for rarely occurring signals. The nonuniform form of quantization 
is used to make the SNR a constant for all signals within the input range. 

Nonuniform quantization is achieved by first distorting the original signal 
with a logarithmic compression characteristic, and then using a uniform quan- 
tizer. For small magnitude signals the compression characteristic has a much 
steeper slope than large magnitude signals. Thus, a given signal change at small 
magnitudes will carry the uniform quantizer through more steps than the same 
change at large magnitudes. The compression characteristic effectively changes the 
distribution of the input signal magnitude. By compression, the low amplitudes 
are scaled up while the high amplitudes are scaled down. After compression, the 
distorted signal is used as input to the uniform quantizer. Thus, we achieve non- 
uniform quantization. There are two compression algorithms commonly used, the 
u-law and the A-law [6,10]. 

We use a device called expander at the receiver with characteristics comple- 
mentary to the compression. It is used so that the overall transmission is not dis- 
torted. The whole process (compression and expansion) is called companding [7]. 
The p. - and A-law compression characteristics as given below are used. 


e п- Гау compression characteristic used in North America is given as: 


log| 1+ шо] 


(4.11) 
log(1 + p} 


[vou = 


where: 
Vin and vout are the normalized input and output voltages, respectively 
u = a positive constant 
u = 0 represents uniform quantization, р = 255 is used in North America 
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* A-Law compression characteristic used in Europe and most of the rest of 
the world is given as: 


Аһ 
[бош] = aes 0 S [vin] = + (4.12а) 
1 + logA[uin 
I| = " | Le hy) <1 (4.12b) 


where A is the positive constant. A = 87.6 is the standard value used in Europe. 
The case of uniform quantization corresponds to A = 1. 


4.6 Pulse Amplitude Modulation (PAM) 


Pulse amplitude modulation [6] is a process that represents a continuous analog 
signal with a series of discrete analog pulses in which the amplitude of the infor- 
mation signal at a given time is coded as a binary number. PAM is now rarely 
used, having been largely superseded by pulse code modulation (PCM). 

Two operations involved in the generation of the PAM signal are: 


1. Instantaneous sampling of the message signal s(t) every T; seconds, where 
f; = 1/T, is selected according to the sampling theorem. 


2. Lengthening the duration of each sample obtained to some constant value T. 


These operations are jointly referred to as sample and hold. One important 
reason for intentionally lengthening the duration of each sample is to avoid the 
use of an excessive channel bandwidth, since bandwidth is inversely proportional 
to pulse duration. 

The Fourier transform of the rectangular pulse h(t) is given as (see Figure 4.12): 


S(f) = Tsinc (f T)e т! (4.13) 


Using flat-top sampling of an analog signal with a sample-and-hold circuit 
such that the sample has the same amplitude for its whole duration introduces 
amplitude distortion as well as a delay. This effect is similar to the variation in 
transmission frequency that is caused by the finite size of the scanning aperture in 
television. The distortion caused by the use of PAM to transmit an analog signal is 
called the aperture effect. The distortion may be corrected by use of an equalizer 
(see Figure 4.13). The equalizer decreases the in-band loss of the reconstruction 
filter as the frequency increases in such a manner to compensate for the aper- 
ture effect. The amount of equalization required in practice is usually small. For 
T/T; = 0.1, the amplitude distortion is less than 0.5%, in which case the need 
for equalization may be omitted altogether. 
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Figure 4.12 Rectangular pulse and its spectrum. 
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Figure 4.13 An equalizer application. 


Example 4.3 

Twenty-four voice signals are sampled uniformly and then time-division multi- 
plexed. The sampling operation is flat-top samples with 1 ps duration. The multi- 
plexing operation includes provision for synchronization by adding an extra pulse 
of sufficient amplitude and also 1 ps duration. The highest frequency components 
of each voice signal is 3.4 kHz. 


a. Assuming a sampling rate of 8 KHz, calculate the spacing between succes- 
sive pulses of the multiplexed signal. 


b. Repeat your calculations using the engineering version of Nyquist rate 
sampling. 
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Solution 

a. T; = БОБ = 125 us 
25 channels (24 voice channels + 1 synchronization channel), time allocated for 
each channel = 125/25 = 5 us. Since the pulse duration is 1 ws, the time between 
pulses is (5 — 1) = 4 us 


b. Nyquist rate = 7.48 kHz (2.2 х 3.4) 


Т; = = 13415 


zu 


— 134 _ 
2—55. = 5.36 us 


The time between pulses is (5.36 — 1) = 4.36 us. 


4.7 Pulse Code Modulation 

Pulse code modulation (PCM) [13] is a digital scheme for transmitting analog 
data. It converts an analog signal into digital form. Using PCM, it is possible 
to digitize all forms of analog data, including full-motion video, voice, music, 
telemetry, etc. 

To obtain a PCM signal from an analog signal at the source (transmitter) of 
a communications circuit, the analog signal is sampled at regular time intervals. 
The sampling rate is several times the maximum frequency of the analog signal. 
The instantaneous amplitude of the analog signal at each sample is rounded off 
to the nearest of several specific, predetermined levels (quantization). The number 
of levels is always a power of 2. The output of a pulse code modulator is a series 
of binary numbers, each represented by some power of 2 bits. At the destina- 
tion of the communications circuit, the pulse code modulator converts the binary 
numbers back into pulses having the same quantum levels as those in the modula- 
tor. These pulses are further processed to restore the original analog waveform. 

When pulse modulation is applied to a binary symbol, the resulting binary 
wave form is called a pulse code modulation waveform. When pulse modulation 
is applied to a nonbinary symbol, the resulting waveform is called M-ary pulse 
modulation waveform. Each analog sample is transmitted into a PCM word con- 
sisting of groups of b bits. The PCM word size can be described by the number 
of quantization levels that are used for each sample. The choice of the number of 
quantization levels, or bits per sample, depends on the magnitude of quantization 
distortion that one is willing to tolerate with the PCM format. 

In North America and Japan, PCM samples the analog waveform 8000 
times per second and converts each sample into an 8-bit number, resulting in a 
64 kbps data stream. The sample rate is twice the 4kHz bandwidth required for a 
toll-quality voice conversion. 
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Differential (or Delta) PCM (DPCM) encodes the PCM values as differences 
between the current and the previous value. For audio, this type of encoding 
reduces the number of bits required per sample by about 25% compared to PCM. 
Adaptive Differential PCM (ADPCM) is a variant of DPCM that varies the size of 
the quantization step to allow further reduction of the required bandwidth for a 
given signal-to-noise ratio. 


Example 4.4 

The information in an analog waveform with a maximum frequency of fm = 3 kHz 
is transmitted over an M-ary PCM system, where the number of pulse levels is 
M = 2? = 32. The quantization distortion is specified not to exceed +1% of the 
peak-to-peak analog signal. 


a. What is the minimum number of bits/sample or bits/PCM word that should 
be used? 


b. What is the minimum sampling rate, and what is the resulting transmission 
rate? 


c. What is the PCM pulse or symbol transmission rate? 


Solution 
lel = PV pp 


where: 

p = the fraction of the peak-to-peak analog voltage, Vpp 

lel = the magnitude of quantization distortion error specified as a fraction p 
of the peak-to-peak analog voltage Vpp 


where R is the number of bits required to represent quantization levels L 


2Rz 1 = 50 
2 x 0.01 


S(RES.64 use R=6 


f; = 2fm = 6000 samples per second 
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fs = 6 х 6000 = 36kbps 
M=2? =32 
b = 5 bits per symbol 


_ 36,000 
5 


К; = 7200 symbols/sec. 


4.8 Shannon Limit 
For a Gaussian channel (with additive white Gaussian noise [AWGN]) a theoretical 


limit to the maximum data rate (Rp) that can be transmitted in a channel with a 
given bandwidth (B,,) is given by the Shannon theorem as [11,12]: 


S 
C= Bylogi[1 + 5) (4.14) 
С Ep Rp 
тс = 101 + тр ze (4.15) 


where: 

E,/No = signal-to-noise density ratio 

At channel capacity Rẹ = C 

Let C/B,, = т (spectral efficiency of the channel), then Equation 4.15 can be 
written as: 


2, Fo 29-1 (4.16) 
No n 
where: 
C = channel capacity (bits per second) 
S = signal strength 
N = noise power 
No = noise density 


In the limit, as n — 0, we get 


= => lim E 1 => lim (2^ : lo 22) >lo е2, > 0.6931 = —1.592dB (4.1 7) 
т 8 8 
No n-0 n0 


Figure 4.14 shows т versus Ej/No for the Gaussian channel. 

The Shannon capacity bound states that there exists a coding/modulation 
scheme that achieves, over the AWGN channel, an arbitrarily low probability of 
bit-error, P, provided that 


Rp < C(SNR) (4.18) 
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Figure 4.14 т versus EjNo. 


4.9 Modulation 

Baseband signals are generated at low rates, therefore these signals are modulated 
onto a radio frequency carrier for transmission. Baseband signal s(t) is complex, 
and can be represented mathematically as 


s(t) = a(t)? (4.19) 
where: 


a(t) is the amplitude and p(t) is the phase 


Assuming a sampling rate the same as the Nyquist rate, the low-pass recon- 
struction filter extends from —f,, to fm (see Figure 4.15). The maximum frequency 
fm of s(t) is an approximate measure of its bandwidth. The Fourier transform of 
s(t) is given by 

Sif) = | slee? ai (4.20) 


—% 


A functional block diagram of a generic modulation procedure for signal s(t) 
is given in Figure 4.16. 


x(t) = Real [5(ї)А е”? | = A,a(t)cos[2-mf-t + (t)] (4.21) 


x(t) = A,a(t)cosd(t)cos(2mf,t) — Aca(t)sinó(t)sin(2mf.t) (4.22) 


104 4 An Overview of Digital Communication and Transmission 


IS(f)i 


Figure 4.15 Power spectral density (PSD). 
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Figure 4.16 Functional block diagram of a generic modulator. 


The modulation can be classified as linear modulation or nonlinear modula- 
tion. A modulation process is linear when a(t)cose(t) and a(t)sind(t) are linearly 
related to the message information signal. Examples of linear modulation are 
amplitude modulation, where the modulating signal affects only the amplitude 
of the modulated signal (i.e., b(t) is constant for any t), and phase modulation, 
where the modulating signal affects only the phase of the modulated signal (i.e., 
when Фф(#) is a constant over each signaling (symbol) interval and a(t) is constant 
for any 2). 

The modulation process is nonlinear when the modulating signal s(t) affects 
the frequency of the modulated signal. The definition of a nonlinear system is 
that superposition does not apply. The modulation process is nonlinear whether 
or not the amplitude of the modulating signal is a function of time. We consider 
a frequency modulation process and let a(t) = a for any t. Then, the nonlinear 
modulated signal is x(t) = aA;cos[2mfst + (t)], where (t) is the integral of a 
frequency function. 

Selection of modulation and demodulation schemes is based on spectral 
efficiency, power efficiency, and fading immunity. During the late 1970s and early 
1980s, constant envelope modulation schemes were used for cellular systems 
to achieve a high-power efficient terminal with a C class amplifier. As a result, 
Gaussian minimum shift keying (GMSK) (see Chapter 9) is the widely used modu- 
lation scheme in the GSM and DECT systems. 

In the mid-1980s, when cellular systems’ capacity became a serious problem, 
developments of linear modulations with two bits per second per Hz (bps/Hz) trans- 
mission capability were initiated. To apply a linear modulation in a wireless com- 
munication system, we need high spectral efficiency as well as high-power efficiency 
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at the same time. 7/4-quadrature phase shift keying (QPSK) (see Chapter 9) was 
used in the Japanese and North American digital cellular and personal systems. 
More details of modulation schemes used in various wireless systems are given in 


Chapter 9. 


4.10 Performance Parameters of Coding and 
Modulation Scheme 

The most important parameter of a coding and modulation scheme is the bandwidth 
requirement, which is determined by the spectrum of the modulated signal usually pre- 
sented as a plot of power spectral density (PSD) against frequency (see Figure 4.17) [1]. 
Ideally, the PSD should be zero outside the band occupied. However, in practice this 
can never be achieved, and the spectrum extends to infinity beyond the band. This is 
either because of the inherent characteristics of the modulation scheme, or because 
of the practical implementation of filters. Hence, we must define the bandwidth, B,, 
such that the signal power falling outside the band is below a specified threshold. 
In practice, this threshold is determined by the tolerance of the system to adjacent 
channel interference. The coding and modulation selection should be based on the 
following factors: 


* bit error rate probability, Рь 
* bandwidth efficiency, т 


Frequency (f) 


Nominal Carrier 
Frequency 


PSD 


Bandwidth: В,, 


Figure 4.17 PSD versus frequency. 
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e signal-to-noise density ratio, E,/No (Ер is the energy рег bit and No is the 
noise density) 


* complexity of transmitter/receiver 


The bandwidth efficiency (or spectrum efficiency), т, of a coding and modulation 
scheme determines the bandwidth requirement. This is defined as the information bit 
rate, Rp, per unit bandwidth occupied, and is measured in bits/sec/Hz (bps/Hz). 


_ К 


B. (4.23) 


An ideal coding and modulation system should provide a small Рь with a 
high bandwidth efficiency (т) and a low signal-to-noise density ratio (E,/No). 
The information rate, Къ, is related to the number of waveforms, M, used by the 
modulator and the duration of these waveforms, T; 


= logaM 
Ts 


Rp (4.24) 

The average power used by the modulator is P = E,/T;, where Es is the 
average energy of the modulator signals. Each signal carries a log; M informa- 
tion bit. 


EXP 


2 Fuego К: (4.25) 


$ 


The signal-to-noise ratio (SNR) is the ratio between the average signal power 
and the average noise power over the signal bandwidth 


(4.26) 


= P _ Ер 
SNR | Е 


NoB, \No 

Equation 4.26 shows that SNR is the product of (E,/No) and (КЬ/В,,), the 

bandwidth (or spectral) efficiency of a modulation scheme. Table 4.1 lists the 
bandwidth efficiencies of several 2G wireless systems. 


Table 4.1 Bandwidth efficiencies of wireless systems. 


Wireless System Rp (kb/s) Bw (kHz) Rp/ By (bps/Hz) 
CT2 72 100 0.72 

GSM 270.8 200 1.354 
IS-54 48.6 30 1.62 

PDC 42.0 25 1.68 


15-95-СОМА 1228 1230 0.998 
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For high SNR, the error probability can be closely approximated by a 
complementary error function erfc[dmiy/(2 //No)], where dmin is the minimum 
Euclidean distance between any two elements of the modulator signal set [1]. It 
is related to the power efficiency (у) of a modulation scheme. The parameter у 
expresses how efficiently a modulation scheme uses the available signal energy to 
generate minimum Euclidean distance. у is defined as: 


аа 
4Ep 


y= (4.27) 


Equation 4.27 provides an approximation to error probability that is asymp- 
totically tight for large SNR. 


рул | PR | (4.28) 
2 N 


Thus, for high signal-to-noise ratios, a modulation scheme is better if its 
power efficiency is greater. Table 4.2 lists bandwidth and power efficiency of 
several M-ary modulation schemes. 

The BER performance of a coding and modulation scheme is an important 
parameter. The shape of Ep/Nọo versus BER (Pp) curves depends on the channel 
and the modulation scheme. Ideally, the BER of the service offered to the user 
should be zero, but it is not possible in practice. Hence, we must specify a BER to 
obtain the required E,/No. There is an inherent trade-off between y and the E,/No 
requirement of a coding and modulation scheme. The greater the bandwidth effi- 
ciency, the greater the required Ej/Nois likely to be. Hence, it is usually possible to 
increase the capacity of a communication system for a given bandwidth allocation 
by increasing the signal power. 


Table 4.2 Bandwidth and power efficiency of M-ary modulation scheme [1]. 


Modulation Rp/ Bw Y 


Pulse Amplitude Modulation 


(PAM) 21092 M 3 logo М/(М?—1) 
Phase Shift Keying (PSK) logo M sin?(x/M) log? M 
Quadrature Amplitude 

Modulation (QAM) log2 M 3 1092 M/(2M— 1) 
Frequency Shift Keying 2log» M/M 1/2 1092 M 


(FSK) 
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4.11 Power Limited and Bandwidth-Limited Channel 

The objective of a general communication system design is to use transmit- 
ted power and channel bandwidth as efficiently as possible. In most commu- 
nication channels, one resource may be more important than another. We may 
therefore classify communication channels as power-limited or bandwidth- 
limited. 

For a power-limited channel, the desired system performance is obtained 
with the smallest possible power. One choice is the use of standard error control 
codes [5] which increase the power efficiency by adding extra bits to the trans- 
mitted symbol sequence. This procedure requires the modulator to operate at a 
higher data rate and, hence, requires a larger bandwidth. 

In a bandwidth-limited channel, increased efficiency in both power and 
frequency utilization is obtained by selecting an integrated coding and modu- 
lation solution, where higher-order modulation schemes (e.g., 8-PSK instead of 
4-PSK; see Chapter 9) are combined with low-complexity coding schemes. Trellis 
codes [9] for bandwidth-limited channels result from the treatment of modula- 
tion and coding as a combined entity rather than as two separate operations. The 
trellis-coded-modulation (TCM) solution combines the choice of a modulation 
scheme with that of a convolutional code, while the receiver, instead of perform- 
ing demodulation and decoding in two separate steps, combines the two opera- 
tions into one. 

Table 4.3 summarizes some of the energy savings (coding gains) in dB that 
can be obtained by doubling the constellation size and using TCM. These are con- 
sidered for coded 8-PSK (relative to uncoded 4-PSK) and for coded 16-QAM (rel- 
ative to uncoded 8-PSK). These gains can be achieved only for high signal-to-noise 
ratios, and decrease as the signal-to-noise ratios decrease. The complexity of 
decoder/demodulator is proportional to the number of states. 


Table 4.3 Coding gain of TCM [1]. 


Coding gain (dB) Coding gain (dB) 


No. of states (8-PSK) (16-OAM) 
4 3.0 4.4 
8 3.6 5.3 
16 4.1 6.1 
32 4.6 6.1 
64 4.8 6.8 
128 5.0 7.4 


256 5.4 7.4 
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4.12 Nyquist Bandwidth 

As discussed earlier, Nyquist showed that the theoretical minimum bandwidth 
(Nyquist bandwidth) required for the baseband transmission of R; symbols per 
second without inter-symbol interference (ISI) is RJ2 Hz. In practice, the Nyquist 
minimum bandwidth is increased by about 10 to 20% because of the constraints 
of real filters. Thus, typical baseband digital communication throughput is reduced 
from the ideal two symbols per Hz to a range of about 1.8 to 1.6 symbols per Hz. 
Assuming Nyquist filtering at baseband, the required bandwidth is related to the 
symbol rate by 


By, =" i B) = R(1 + B) (4.29) 
where: 

B = roll-off factor (may vary between 0 and 1). This allows a trade-off between 
bandwidth and desirable time-domain properties of the signal. Very low values are 
difficult to realize in practice because they require very rapid roll-off in the filter 
response and because of the ringing in time-domain response. 

From the set of M symbols, the coding system assigns to each symbol b bits, 
where M = 2°. The number of bits per symbol will be: 


b = logzM 
Rp = OR, 
Rp Rp 
wR, = = = 4. 
A b | logM к 


For signaling at a fixed symbol rate as b is increased, the data rate Ry is 
increased. In the case of M-PSK, increasing b results in an increased bandwidth 
efficiency т. In other words, with the same system bandwidth, we can transmit 
M-PSK signals at an increased data rate and hence at an increased т. 

The effective duration Тр of each bit in terms of the symbol duration, T;, or 
the symbol rate, Rg, is 


quu: ie 
Кр b logoM 


2 Re = 1080М . | pbits/s/Hz (4.31) 
By By Ts By Tp 


From Equation 4.31, we can observe that a digital communication system 
becomes more bandwidth efficient as its В,„Ть product is decreased. Thus, signals 
with small B Tp product are often used with a bandwidth-limited system. For exam- 
ple the Global System of Mobile (GSM) communication uses GMSK modulation 
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with a B,, T; product equal to 0.3, where B,, is ће 3dB bandwidth of a Gaussian 
filter (see Chapter 9). For uncoded bandwidth-limited systems, the objective is to 
maximize the transmitted information rate within the allowable bandwidth, at the 
expense of a signal-to-noise density ratio (Ej/No) (while maintaining a specified 
value of BER). 

For the case of power-limited systems, power is scarce but system band- 
width is available. The following trade-offs are possible: (1) improved BER at 
the expense of bandwidth for a fixed signal-to-noise density ratio (Ej/No); or 
(2) reduction in signal-to-noise density ratio (Еь/Мо) at the expense of band- 
width for a fixed BER. A natural modulation choice for a power-limited system is 
M-FSK (see Chapter 9). 

Using Equations 4.29 and 4.31, we get 


Ro = lgM piggnz (4.32) 
B, (1+8) 


The M-PSK modulation is a bandwidth-efficient scheme. As M increases in 
value, Кь/В,, also increases. Thus M-PSK modulation can achieve improved band- 
width efficiency at the cost of increased signal to noise density ratio (Ey/No). 

For M-FSK, the Nyquist minimum bandwidth is given as 


M(1 +В) 
B, = NEC S MRj(1 + B) (4.33) 


К) 


From Equations 4.32 and 4.30, we get 


Ry _ lgM (4.34) 
B, М(1+ В) : 


For simplicity, the modulation choice is limited to constant-envelope 
types—either M-PSK or noncoherent orthogonal M-FSK. Thus, for an uncoded 
system, if the channel is bandwidth limited, M-PSK is selected, and if the channel 
is power limited, M-FSK is selected. Note that, when we consider error-correction 
coding, the selection of a modulation scheme is not so simple because there may 
exist coding schemes which can provide power-bandwidth trade-off more effec- 
tively than would be possible using any M-ary modulation scheme. 


Example 4.5 

In a digital communication system, the received power to noise-power spectral 
density (S/No) is 53 dB-Hz, the required data rate is 9.6 kbps and the available 
bandwidth is 4.8 kHz. The required BER performance Pp is x10 ?. What is the 
design choice of the modulation scheme if no error-correction coding is used? 
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Solution 


Since the required data rate of 9.6 kbps is more than the available bandwidth of 
4.8 kHz, the channel is bandwidth-limited. 


Ee АВ) =_5 (dB - Hz) — R(dB) 
No No 

с P^ = 53 — 101069600 = 20.78 dB 
No 


Try the 8-PSK modulation scheme 


Р, = (logzM) X Py = (log28) х 107° 3 x 10? 


E; = Ep = = 
NT (10928) х No 3 x 20.78 = 62.34 
E E; уту S -5 -5 
Р;(8) = 20 al | зї = 20(4.28) = 2.2 X 10? <3 X 10^? (see Chapter 9) 
0 


Therefore, use 8-PSK modulation. 


Example 4.6 

In a digital communication system, the signal-to-noise spectral density ratio 
is 48 dB-Hz, the available bandwidth is equal to 45 kHz, and the data rate is 
9.6 kbps. The required BER performance, Pp, is 107°. What is the design choice 
of the modulation scheme without an error-correction coding? 


Solution 
In this case, the channel is not bandwidth limited since the available bandwidth of 
45 kHz is more than adequate to support the required data rate of 9.6 kbps. 


Eb (B) = 5 (dB - Hz) — R(dB) 
No No 
Ep 
^L = 48 — 10log9600 = 6.61dB 
No 


We try the 16-FSK modulation scheme 


Е, _ En _ = 
ү = (108216) X 5 = 4 X 6.61 2644 


SE; 
P, (M) = M ei = Bon = 1.36 x 1075 (see Chapter 9) 
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For orthogonal signaling 


Р, < D 1 P< 5222 x 107° =2 х 107 (see Chapter 9) 


We сап meet the given specifications for this power-limited channel with a 
16-FSK modulation scheme without any error-correction coding. 


4.13 OSI Model 


Coding and modulation are the primary tasks of the OSI physical layer, which 
adapts the information transmitted to it from the higher layers into a form that 
can be transmitted over the physical medium. Some functions of coding and 
modulation, such as error control [15] and multiple access, appear higher up the 
OSI stack. Table 4.4 summarizes network-related functions performed by the first 
three OSI layers. 


4.13.1 OSI Upper Layers 
The role of the OSI upper layers (Transport, Session, Presentation, and Application) 
are summarized as follows [3,14]: 

The transport layer segments the messages into packets of acceptable sizes 
and performs the reassembly at the destination. It may multiplex many low-rate 
transmissions onto one virtual circuit or divide a high-rate transmission into par- 
allel virtual circuits. The transport layer controls transmission errors and requests 
retransmissions of packets corrupted by transmission errors. In addition, the flow 
may be controlled by some mechanism to prevent one host from sending data 
faster than the destination host can handle. 

The session layer sets up the call and takes care of the authentication of 
the user and of billing. The session layer supervises the synchronization (packet 


Table 4.4 Functions of first four OSI layers. 


OSI layers Function 


Network Layer Routing 


Data Link Layer 


* Logical Link Control (LLC) Error Control 
* Media Access Control (MAC) Multiple Access protocols 
Physical Layer Modulation, Forward Error 


Correction (FEC), Encryption, 
Equalization, Synchronization 


Physical Medium Radio Propagating Mechanism 
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numbering) and the recovery in case of failures. The session layer closes the session 
at the end of transmission. 

The presentation layer asks the session layer to set up a call. It specifies the 
destination's name and type of transmission (e.g., datagram, high priority). The 
presentation layer translates between the local syntax used by the application 
process and transfer syntax. The presentation layer also performs the required 
encryption and data compression. 

Theapplication layer provides information transfer services for user application 
programs. The user interacts with the application layer through a user interface. 
The application layer is composed of Specific Application Service Elements (SASEs) 
that use the services of Common Application Service Elements (CASEs). A CASE 
establishes are association between SASEs and may include an Association Control 
Service Element (ACSE), a Remote Operation Service Element (ROSE), and the 
Commitment Concurrency and Recovery (CCR) element. 


4.14 Data Communication Services 

End-to-end communication services are classified as either synchronous (sync) or 
asynchronous (async) [2]. A sync communication service delivers a bit stream with 
a fixed delay and a given bit error rate. The voice communication is an example of 
the sync communication service. The sync delivery of a 64 kbps voice bit stream 
can be implemented by dividing the bit stream into packets that are received with 
random delays and are stored in a buffer to hold the bits until they are delivered. 
This implementation of a sync transmission service is called packetized-voice. In 
packetized-voice, a buffer is used to absorb the random fluctuations in the packet 
transmission delays. Another implementation of the sync transmission of the bit 
stream is to use a dedicated coaxial cable that propagates the bits one after the 
other, all with the same delay. 

In an async communication service, the bit stream to be transferred is 
divided into packets. The packets are received by the destination with varying 
delays, and a fraction of them may not be received correctly at the destination. An 
async communication service is evaluated by its QoS. The QoS deals with param- 
eters, such as the packet error rate, delay, throughput, reliability, and security 
of the communication. There are two classes of async communication services: 
connection-oriented and connectionless. A connection-oriented communication 
service delivers the packet in sequence, i.e., in the correct order and confirms the 
delivery. Depending on the QoS requirements, the delivery may be guaranteed 
to be error-free. Thus, connection-oriented service looks from end-to-end like a 
dedicated link, which may be noiseless or noisy. A connectionless communica- 
tion service delivers the packets individually. The packets can be delivered out of 
order, and some may contain errors and others may be lost. Some connectionless 
services provide an acknowledgment (ACK) of the correctly delivered packets. The 
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connectionless services are similar to the mail service provided by the post office: 
letters may be delivered out of order; normal mail delivery does not guarantee or 
acknowledge the delivery. Another class of connection-oriented communication 
service is also used in some applications. It is called expedited data, and corre- 
sponds to a potentially faster delivery of certain packets, usually by making them 
jump to the head of the queues of packets that are waiting to be transmitted. 
Communication services are implemented by transporting bits over the 
network. One essential objective of the bit transport is connectivity, in which 
one network user should be able to exchange information with many other users. 
It should be possible to route the bits of one user to any one of a large number of 
other users. The property to vary the path followed by the bits is called switching. 
Three basic methods used for switching bits in communication networks are: 


* circuit-switching 
* virtual-circuit packet switching 
* datagram packet switching 


In circuit-switching, the switch connects transmission paths to establish a 
circuit between transmitter and receiver. Circuit-switching is quite suitable for 
continuous data transmission services. It is a sync service. 

A packet-switched network uses another scheme. The nodes of the network, 
packet-switching nodes, play a role similar to that of switches in a circuit-switched 
network. Packet-switched networks can use two different methods for selecting the 
path followed by the packets: virtual-circuit (VC) and datagram. In the VC transport, 
the different packets that are part of the same information transfer are sent along the 
same path. The packets follow one another as if they were using a dedicated circuit 
even though they may be interleaved with other packet streams. Some implementa- 
tions of VC perform an error control on each link between successive nodes. Thus, 
not only are the packets delivered in sequence by each node to the next node along 
the path, but they are also transmitted without errors. This is implemented by each 
node checking the correctness of the packets it receives and asking the previous node 
along the path to retransmit incorrect packets. VC packet-switching does not need 
a buffer at the destination. VC packet-switching is a sync service. 

Since multiple virtual circuits may exist between the source-destination pair, 
routing cannot be done on the basis of the source-destination address only. Data 
packets must carry an indication of VC identification as well. Routing is done on 
the basis of explicit route number and destination address. An explicit routing 
table at each node associates an appropriate outgoing transmission group with 
the destination address and explicit route number. By changing the explicit route 
number for a given destination, a new path will be followed. This introduces 
alternative route capability. If a link or node along the path becomes inoperative, 
any session using that path can be reestablished on an explicit route by bypass- 
ing the failed element. Explicit routes can also be assigned on the basis of type of 
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traffic, type of physical media along the path (satellite or terrestrial, for example), 
or other criteria. Routes could also be listed on the basis of cost, the smallest-cost 
route being assigned first, then the next-smallest-cost route, and so forth. 

In datagram packet-switching, the bits are grouped as packets. Each packet 
is labeled with the address of its destination. The packets are routed independently 
of one another and arrive at destination out-of-sequence. The datagram packet 
switching requires buffers at the source and destination. In datagram packet 
switching networks, each network node keeps a complete (global) topological 
database that is updated regularly as topological changes occur. Generally, the 
routing philosophy of datagram networks is to route packets (datagram) along 
paths of minimum time delay. The datagram is an async service. 


4.15 Multiplexing 


Multiplexing [2] refers to a variety of techniques that are used to make an efficient use 
of transmission facility. In many cases, the capacity of transmission facility exceeds 
the requirements for the transfer of data between two devices. That capacity can be 
shared among multiple transmitters by multiplexing a number of signals onto the same 
medium. In this case, the actual transmission path is called a circuit or link, and the 
portion of capacity devoted to each pair of transmitter/receivers is called a channel. 

There are three types of multiplexing techniques: frequency-division multi- 
plexing (FDM), synchronous time-division multiplexing (TDM), and improved 
synchronous TDM. FDM is the most widespread. TDM is commonly used for 
multiplexing digitized voice streams. The third type improves the efficiency of 
synchronous TDM. It is known by various names: 


* Statistical TDM 
* Asynchronous TDM 
* Intelligent TDM 


Figure 4.18 shows the concept of multiplexing. We have m inputs to a 
multiplexer. The multiplexer is connected by a single data link to a demultiplexer. 


m inputs m outputs 


One link, m channels 


Figure 4.18 Multiplexing. 
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The link carries m separate channels of data. The multiplexer combines data from 
m input lines and transmits over a higher-capacity data link. The demultiplexer 
accepts the combined data stream, separates the data according to channel, and 
delivers them to the appropriate output lines. 


4.16 Transmission Media 

The transmission medium [2] is the physical path between the transmitter and 
receiver in a communication system. The characteristics and quality of transmis- 
sion depend on the nature of the signal and the nature of the medium. 

Two general ranges of frequencies are of interest. Microwave frequencies 
cover a range of about 2 to 40 GHz. At these frequencies, highly directional beams 
are possible. Microwave is quite suitable for point-to-point transmission. Signals 
in the frequency range 30 MHz to 1 GHz are referred to as radio waves. Omnidi- 
rectional transmission is used and signals at these frequencies are often employed 
for broadcast applications. 

The following are the commonly used transmission mediums used in wired 
and wireless communications: 


* Twisted pair 
Coaxial cable 


Fiber optics 
Terrestrial microwave 
Radio 

Satellite 


A twisted pair contains two insulated copper wires arranged in a regular spiral 
pattern. A wire pair acts as a single communication link. Typically, a number of these 
pairs are bundled together into a cable by wrapping them in a tough protective sheath. 
Over longer distances, cables may contain hundreds of pairs. The twisting of the indi- 
vidual pairs minimizes electromagnetic interference between the pairs. The wires in 
a pair have a thickness of 0.016 to 0.036in. The twisted pair is by far the most com- 
mon medium for both analog and digital data transmission. It is the backbone of the 
telephone system as well as the workhorse for intra-building communications. 

A coaxial cable is simply a transmission line consisting of a pair made up of an 
inner conductor surrounded by a grounded outer conductor, which is held in a 
concentric configuration by a dielectric. Systems have been designed to use coaxial cable 
as a transmission medium with a capability of transmitting an FDM configuration 
from 120 to 10,800 voice channels. Community antenna television (CATV) systems 
use single cable for transmitting a bandwidth of the order of 300 MHz. 

One of the advantages of coaxial cable systems is reduced noise accumulation 
when compared to radio links. A coaxial cable system is attractive for television 
transmission or other video applications. 
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Fiber optics as a transmission medium has a comparatively unlimited 
bandwidth. It has excellent attenuation properties—as low as 0.25dB/km. 
A major advantage of fiber optics compared to coaxial cable is that no equaliza- 
tion is needed. Also repeaters separation of the order of 10 to 1000 times that of 
coaxial cable for equal transmission bandwidths can be used. Other advantages of 
fiber optics are: 


* Electromagnetic immunity 


Ground loop elimination 


* Security 


Small size and light weight 


* Expansion capabilities require change out of electronics only, in most 
cases. 


Fiber optics uses three wavelength bands: around 800, 1300, and 1600 nm 
or near-visible infrared. Fiber optics has analog transmission applications, 
particularly for video/TV. 

The primary use of terrestrial microwaves is in long-haul telecommunications 
service as an alternative to coaxial cable for transmitting television and voice. Micro- 
waves can support high data rates over long distances. The microwave requires far 
fewer amplifiers or repeaters than coaxial cable for the same distance, but requires 
line-of-sight transmission. One of the potential uses for terrestrial microwaves is 
to provide digital data transmission in small regions (radius « 10km). Another 
common use of microwaves is for short point-to-point links between buildings. 
It can also be used as a data link between local area networks. 

The principal difference between radio and microwaves is that radio is omnidi- 
rectional and microwaves are focused. Radio does not require dish-shaped antennas, 
and the antennas need not be rigidly mounted to precise alignment. Radio covers 
VHF and some UHF bands: 30 MHz to 1 GHz. A primary source of impairment for 
radio waves is multipath interference. Reflection from land, water, and natural or 
human-made objects can create multiple paths between antennas. This effect is fre- 
quently evident when TV reception displays multiple images as a plane passes by. 

Satellite communication is nothing more than a radio link communication 
using one or two RF repeaters located at great distances from terminal earth 
stations. If the range from an earth antenna to a satellite is the same as the satellite 
altitude, the round-trip delay is around 500 ms, which is more than that encoun- 
tered in conventional terrestrial systems. Thus, one major problem is propagation 
time and the resulting echo on telephone circuits. To reply for packet transmis- 
sion systems affects the delay and requires careful selection of telephone signaling 
systems, otherwise the call setup time may become excessive. 

The equatorial orbit is filling with geostationary satellites and RF interference 
from one satellite system to another is increasing. The most desirable frequency bands 
for commercial satellite communication are in the spectrum 1000-10,000 MHz. 
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4.17 Transmission Impairments 


The nominal voice channel occupies the band 0-4kHz. The CCITT (ITU) voice 
channel occupies the band 300-3400 Hz. There are four other parameters that are 
used to characterize the voice channel: 


1. Attenuation distortion 
2. Phase distortion 


3. Level (signal power level) 
4. Noise and SNR 


4.17.1 Attenuation Distortion 

A communication channel suffers various types of distortion, i.e., the output signal 
from the channel is distorted in some manner such that it is not an exact replica of the 
input. Attenuation distortion can be avoided if all frequencies within the passband 
are subjected to exactly the same loss (or gain). One type of distortion is referred to as 
attenuation distortion and is the result of imperfect amplitude-frequency response. 


4.17.2 Phase Distortion 

A voice channel may be regarded as a band-pass filter. A signal takes a finite time 
to pass through a filter. This time is a function of the velocity of propagation, 
which varies with the medium involved. The velocity also tends to vary with fre- 
quency because of the electrical characteristics associated with it. 

The finite time a signal takes to pass through the total extension of a voice 
channel or any network is called delay. Absolute delay is the delay a signal experi- 
ences while passing through the channel at a reference frequency. The propagation 
time is different for different frequencies with the wave front of one frequency 
arriving prior to the wave front of another in the passband. Thus, the phase is 
shifted or distorted. If the phase shift is uniform with respect to frequency, a mod- 
ulated signal will not be distorted, but if the phase shift is nonlinear with respect 
to frequency, the output signal is distorted compared to the input. 


4.17.3 Level 

System levels are used to engineer a communication system. A zero test-level point 
is established. A zero test-level is the point at which the test-tone level should be 
OdBm. From zero test-level other points may be shown using dBr (decibel refer- 
ence). The dBm and dBr are related as: 


dBm = dBm0 + dBr (4.35) 


For example, a value of —30 dBm at a —20 dBr point corresponds to a reference 
level of - 10 dBm0. A —10dBm0 signal introduced at 0 dBr point (zero test-level) has 
an absolute signal level of —10 dBm. 
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4.17.4 Noise and SNR 


Noise 
Noise can be put into the following categories: 

* Thermal noise 

* [nter modulation (IM) noise 

* Crosstalk 

* [mpulse noise 

Thermal noise occurs in all transmission media and all communication 

equipment. It occurs due to random electron motion and is characterized by a 
uniform distribution of energy over the frequency spectrum with a Gaussian dis- 
tribution of levels. The white noise refers to the average uniform spectral distribu- 
tion of energy with respect to frequency. Thermal noise is directly proportional to 


bandwidth (B,,) and temperature (T). The amount of thermal noise to be found in 
1 Hz of bandwidth in an actual device is given as: 


No = ЁТ (W/Hz) (4.36) 


where: 
k = Boltzmann’s constant (1.3803 х 10723 J/K) 
T = absolute temperature (K) 
At room temperature T = 290K 


No = 1.3803 x 290 x 10 7? = —204dBW/Hz = —174 dBm/Hz 
The noise power at temperature T with bandwidth B,, is given as: 
N= РТВ,, 
М = —198.6dBW + 10logT + 10log B, (4.37) 


Inter modulation (IM) noise is the result of the presence of IM products. If 
two signals with frequencies fı and f» are passed through a nonlinear device ог 
medium, the result will be IM products that are spurious frequency components. 
These components may be present either inside or outside the band of interest for 
the device. IM noise may result from a number of causes: 


* Improper level setting. If the level of input to a device is too high, the device 
is driven into its nonlinear operating region 


* Improper alignment causing a device to function nonlinearly 
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* Nonlinear envelope 


* Device malfunction 


Crosstalk refers to unwanted coupling between signal paths. Crosstalk is 
caused by (1) electrical coupling between transmission media, (2) poor control 
of frequency response, and (3) the nonlinear performance in an analog multiplex 
system. There are two types of crosstalk: 


e [ntelligible — where at least four words are intelligible to the listener from 
extraneous conversations in a seven-second period (for voice applications) 


e Unintelligible — crosstalk resulting from any other form of disturbing effects 
of one channel on another. 


Impulse noise is noncontinuous and consists of irregular pulses or noise 
spikes of short duration and of relatively high amplitude. These spikes are 
often called *hits." Impulse-noise degrades voice telephony only marginally, 
if at all; however, it may seriously degrade error rate on data or other digital 
circuits. 


SNR 


SNR is expressed in decibels (dB) — the amount by which a signal level exceeds 
the noise within a specified bandwidth. 


S (dB) = (Signal level)(dBm) — (Noise level)(dBm) (4.38) 


The following are the suggested SNR values for various services: 
* Voice: 40dB* 
* Video: 45 dB* 
* Data ~15 dB, based on specified BER and modulation type. 


Note: The values marked by * are based on customer input. 


4.18 Summary 

In this chapter we presented the essentials of digital communications. This chapter 
may be skipped by those readers who have been exposed to digital communica- 
tions. The chapter outlines the process of converting an analog signal to a digital 
signal. The chapter presented the modulation and error correcting schemes that 
are used in wireless communications systems. It also discussed data communica- 
tion services and defined circuit-switched and packet-switched services. Finally, 
it looks at the most common types of transmission media, and the behavior of 
signals on those media. 
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The readers who wish to learn more about digital communication theory 
should refer to several excellent books listed in the reference section (for example 
[6] and [7]). More details about modulation schemes used in wireless communica- 
tions can be found in Chapter 9. 


Problems 


4.1 
4.2 
4.3 
4.4 


4.5 


4.6 


4.7 


4.8 


4.9 


4.10 


Define linear and nonlinear modulation schemes. 
What are the power limited and bandwidth limited channels? 
Define the Nyquist bandwidth. 


A digital signaling system is required to operate at 9.6kbps. If a signal 
element encodes a 4-bit word, what is the minimum bandwidth of the 
channel? 


Given a channel with intended capacity of 20 Mbps, the bandwidth of 
the channel is 3 MHz. What signal-to-noise ratio is required to achieve 
this capacity? 


The receiver in a communication system has a received signal power of 
—134dBm, a received noise power spectral density of —174dBm/Hz, 
and a bandwidth of 2000Hz. What is the maximum rate of error-free 
information for the system? 


Find the minimum required bandwidth for the baseband transmission of 
an 8-level PAM pulse sequence having a data rate, Къ, of 9600 bps. The 
system characteristics consist of a raised-cosine spectrum with a 50% 
excess bandwidth. 


Find the BER probability, Pe, of an M-PSK system for 14.4 kbps signal, 
amplitude is 15 mv, and noise density, No is 107? W/Hz. 


A noncoherent orthogonal M-FSK system carries 3 bits per symbol. The 
system is designed for E,/No = 6 dB. What is the maximum bit error rate 
probability? Find the bandwidth efficiency of the system. 


A noncoherent orthogonal M-FSK system carries 4 bits per symbol. The 
system is designed to have a maximum probability of symbol-error of 
1076. What is the required Ej/No? What is the bandwidth efficiency? 


References 


1. Burr, Alister. Modulation and Coding for Wireless Communications. Upper Saddle River, 
NJ: Prentice Hall, 2001. 


2. Freeman, R. L. Telecommunication System Engineering. New York: John Wiley and Sons, 


1989. 


122 4 An Overview of Digital Communication and Transmission 


3. Garg, V. K., and Wilkes, J. E. Principles & Applications of GSM. Upper Saddle River, NJ: 
Prentice Hall, 1999. 


4. Glover, I. A., and Grant, P. M. Digital Communications. Upper Saddle River, NJ: Prentice 
Hall, 1998. 


5. Hamming, R.W. Error detecting and correcting codes. Bell System Technical Journal, 
29:147-160, 1950. 


6. Haykin, S. Communication Systems. New York: John Wiley and Sons, 2001. 


7. Lathi, B. P. Modern Digital and Analog Communications Systems. 2nd Edition. Holt, 
Reinhart and Winston, 1989. 


8. Nyquist, H. Certain topics in telegraph transmission theory. AIEE Transactions, 47: 617— 
644, 1928. 


9. Proakis, J. G. Digital Communications. 3rd Edition. McGraw-Hill, 1995. 


10. Rappaport, T. S. Wireless Communications: Principles and Practice, 2nd Edition. Upper 
Saddle River, NJ: Prentice Hall, 2000. 


11. Shannon, C. E. A mathematical theory of communication, Part 1. Bell System Technical 
Journal, 27:379, 1948. 


12. Shannon, C. E. A mathematical theory of communication, Part 2. Bell System Technical 
Journal, 27:623, 1948. 


13. Skalar, B. Digital Communication — Fundamental and Applications. Englewood Cliffs, NJ: 
Prentice Hall, 1988. 


14. Stallings, W. Data and Computer Communications. New York: Macmillan Publishing 
Company, 1988. 


15. Sweeney, P. Error Control Coding: An Introduction. Prentice Hall, 1991. 


16. Taub, H., and Schilling, D. L. Principles of Communications Systems. New York: McGraw 
Hill, 1999. 


17. Ziemer, R. E., and Peterson, R. L. Introduction to Digital Communication. New York: Mac- 
millan Publishing Company, 1992. 


CHAPTER 5 


Fundamentals of Cellular 
Communications 


5.1 Introduction 

In this chapter, we present the concept of a cellular system and discuss the 
fundamentals of cellular communications. We develop a relationship between 
reuse ratio (q) and cluster size or reuse factor (N) for hexagonal cell geometry, as 
well as study cochannel interference for omnidirectional and sectorized cells. We 
also discuss cell splitting and segmentation procedures used in cellular systems. 


5.2 Cellular Systems 

Most commercial radio and television systems are designed to cover as much 
area as possible. These systems typically operate at maximum power and with 
the tallest antennas allowed by the Federal Communications Commission (FCC). 
The frequency used by the transmitter cannot be reused again until there is 
enough geographical separation so that one station does not interfere signifi- 
cantly with another station assigned to that frequency. There may even be a large 
region between two transmitters using the same frequency where neither signal is 
received. 

The cellular system takes the opposite approach [1,3,4,5,9,11—14]. It seeks to 
make an efficient use of available channels by employing low-power transmitters 
to allow frequency reuse at much smaller distances (see Figure 5.1). Maximizing 
the number of times each channel may be reused in a given geographic area is the 
key to an efficient cellular system design. 

Cellular systems are designed to operate with groups of low-power radios 
spread out over the geographical service area. Each group of radios serve mobile 
stations located near them. The area served by each group of radios is called a cell. 
Each cell has an appropriate number of low-power radios to communicate within 
the cell itself. The power transmitted by the cell is chosen to be large enough to 
communicate with mobile stations located near the edge of the cell. The radius of 
each cell may be chosen to be perhaps 28 km (about 16 miles) іп a start-up system 
with relatively few subscribers, down to less than 2 km (about 1 mile) for a mature 
system requiring considerable frequency reuse. 
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M) - Same frequencies are 
NA used in these cells 
(first-tier) 
N=} ++i j 
N= 22 +1? +21=7 


First-tier 
interfacing cell 


Cluster of 7 cells (N = 7) 


Figure 5.1 Cell arrangement with reuse factor. 


As the traffic grows, new cells and channels are added to the system. If an 
irregular cell pattern is selected, it would lead to an inefficient use of the spectrum 
due to its inability to reuse frequencies because of cochannel interference. In addi- 
tion, it would also result in an uneconomical deployment of equipment, requiring 
relocation from one cell site to another. Therefore, a great deal of engineering 
effort would be required to readjust the transmission, switching, and control 
resources every time the system goes through its development phase. The use of a 
regular cell pattern in a cellular system design eliminates all these difficulties. 

In reality, cell coverage is an irregularly shaped circle. The exact coverage of 
the cell depends on the terrain and many other factors. For design purposes and as 
a first-order approximation, we assume that the coverage areas are regular poly- 
gons. For example, for omnidirectional antennas with constant signal power, each 
cell site coverage area would be circular. To achieve full coverage without dead 
spots, a series of regular polygons are required for cell sites. Any regular polygon 
such as an equilateral triangle, a square, or a hexagon can be used for cell design. 
The hexagon is used for two reasons: a hexagonal layout requires fewer cells and, 
therefore, fewer transmitter sites, and a hexagonal cell layout is less expensive 
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compared to square and triangular cells. In practice, after the polygons are drawn 
on a map of the coverage area, radial lines are drawn and the signal-to-noise ratio 
(SNR) calculated for various directions using the propagation models (discussed 
in Chapter 3), or using appropriate computer programs [2,6—8]. For the remain- 
der of this chapter, we assume regular polygons for coverage areas even though in 
practice that is only an approximation. 


5.3 Hexagonal Cell Geometry 
We use the u-v axes to calculate the distance D between points Сі and С» (see 
Figure 5.2). The u-v axes are chosen so that и-ахіѕ passes through the centers of 


the hexagons. С and С» are the centers of the hexagonal cells with coordinates 
(41,71) and (u2,v2) [11,12]. 


D = {(из—и1) (cos30°)” + [(v2—v1) + (из—и)(їп30°)] ] ^ —— (5.1) 
= [(из—и1)” + (va—vi). + (иэ—и1) (u3—1)] ^ (5.2) 
Vy 


2R Cos 30 


Figure 5.2 Coordinate system. 
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If we assume (21,71) = (0,0), or the origin of the coordinate system is the 
center of a hexagonal cell, and restrict (u2,v2) to be a positive integer valued (i,/) 
then normalized distance Dnorm from Equation 5.2 can be written as: 


Dyorm = [2 + Р + u^ (5.3) 


The normalized distance between two adjacent cells is unity for (i = 1, 
j = 0) or (i = 0, j = 1). The actual center-to-center distance (D) between two 
adjacent hexagonal cells is 2Rcos30? ог /3R where R is the center-to-vertex 
distance. 

We assume the size of all the cells is roughly the same. As long as 
the cell size is fixed, and each cell transmits the same power, cochannel 
interference will be independent of the transmitted power of each cell. The 
cochannel interference is a function of q where q — D/R. But D (distance 
between any two cells) is a function of № and S/I. N; is the number of 
cochannel-interfering cells in the first tier (see Figure 5.3, Note: N is 6; the 
number of cochannel-interfering cells in the second tier will be 12) and S/I 
is the received signal-to-interference ratio at the desired mobile receiver. We 
neglect the effects of cochannel-interfering cells in the second, third, and 
higher tiers because their contributions are much smaller compared to the 
first tier («196 of the total interference is caused by cells in the second and 
higher tiers). 

Assuming that the first cell is centered at the origin (и = 0, v = 0), the 
distance between any two cells will be: 


D = (Dsom)( V 3R) (5.42) 
Using Equation 5.3 cochannel separation (D) (Figure 5.4) will be: 
D? = 3R*(? + f? + ij) (5.4b) 


Since the area of a hexagon is proportional to the square of the distance 
between the center and vertex, the area enclosed by the large hexagon is: 


Alarge = ИЗЕР + 7° + 1] (5.5) 


where Ё is a constant 


Similarly the area enclosed by the small hexagon is given as: 


Ауа! = k(R?) (5.6) 
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First-tier 
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— ——» Cell Site-to-Mobile Interference (Downlink) 
MM » Mobile-to-Cell Site Interfaces (Uplink) 


Figure 5.3 Cochannel interference with omnidirectional cell site. 


Comparing Equation 5.5 and Equation 5.6, we can write 


Alarge = 2. 2, ый. D? 
гав = 3(4 Bj +H) = 5 (5.7) 
Asmall К? 


From symmetry, we can see that the large hexagonal encloses the center 
cluster of N cells plus one-third of the number of cells associated with six other 
peripheral hexagons. Thus, the total number of cells enclosed in the large hexagon 
is equal to N + 6(N/3) = 3N. Since the area is proportional to the number of cells, 
Alarge = 3N and Asmali = 1. 


Abe = 3N (5.8) 
Asmall 
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First-Tier 


Interfering 
Cell 
Figure 5.4 Six effective interfering cells in tier 1 of cell 1. 
Substituting Equation 5.8 into Equation 5.7 we get: 
М=1 +7 + (5.9) 
-D* = 3N (5.10) 
R2 

D = 4 =/3N (5.11) 

R | 


where: 
q = reuse ratio (refer to Figure 5.5) 
N = cluster size (see Figure 5.1) or reuse factor 


Table 5.1 lists the values of q for different values of N. 
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Figure 5.5 Relationship between q and N. 


Equation 5.11 is important because it affects the traffic-carrying capacity 
of a cellular system and the cochannel interference. By reducing q, the number of 
cells per cluster is reduced. If total RF channels are constant, then the number of 
channels per cell is increased, thereby increasing the system capacity. On the other 
hand, cochannel interference is increased with small q. The reverse is true when q 
is increased —an increase in q reduces cochannel interference and also the traffic 
capacity of the cellular system. 

Table 5.1 shows that a 2-cell, 5-cell, etc., reuse pattern does not exist. How- 
ever, the basic assumption in Equation 5.9 is that all six first-tier interferers are 
located at the same distance from the desired cell. Asymmetrical reuse arrange- 
ments, where interferers are located at various distances, do allow for 2-cell, 
5-cell, etc., reuse. 
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Table 5.1 Cochannel reuse ratio (q) vs. frequency reuse pattern (N). 


i j N q=D/R 
1 0 1 1.73 
1 1 3 3.00 
2 0 4 3.46 
2 1 7 4.58 
3 0 9 5.20 
2 2 12 6.00 
3 1 13 6.24 
4 0 16 6.93 
3 2 19 7.55 
4 1 21 7.94 
4 2 28 9.17 


Example 5.1 

We consider a cellular system in which total available voice channels to handle 
the traffic are 960. The area of each cell is 6 km? and the total coverage area of the 
system is 2000 km?. Calculate (a) the system capacity if the cluster size, N (reuse 
factor), is 4 and (b) the system capacity if the cluster size is 7. How many times 
would a cluster of size 4 have to be replicated to cover the entire cellular area? 
Does decreasing the reuse factor N increase the system capacity? Explain. 


Solution 
* Total available channels = 960 
* Cell area = 6km? 
e Total coverage area = 2000 km? 
N=4 
* Area of a cluster with reuse N = 4:4 X 6 = 24km? 


* Number of clusters for covering total area with N equals 4 — 2000/24 
= 83.33 ~ 83 


* Number of channels per cell = 960/4 = 240 
* System capacity = 83 X 960 = 79,680 channels 


N27 
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* Area of cluster with reuse N = 7: 7 X 6 = 42km? 

* Number of clusters for covering total area with N equals 7 = 2000/42 
= 47.62 ~ 48 

* Number of channels per cell = 960/7 = 137.15 ~ 137 

* System capacity — 48 X 960 — 46,080 channels 
It is evident when we decrease the value of N from 7 to 4, we increase 


the system capacity from 46,080 to 79,680 channels. Thus, decreasing the reuse 
factor (N) increases the system capacity. 


5.4 Cochannel Interference Ratio 
The S/I ratio at the desired mobile receiver is given as [5,10]: 


S. S 
3 = (5.12) 


where: 
I, = the interference due to the kth interferer 
Nj; = the number of interfering cells in the first tier. 


In a fully equipped hexagonal-shaped cellular system, there are always six 
cochannel-interfering cells in the first tier (i.e., № = 6, see Figure 5.1). Most of 
the cochannel interference results from the first tier. Contribution from second 
and higher tiers amounts to less than 196 of the total interference and, therefore, 
it is ignored. Cochannel interference can be experienced both at the cell site and 
the mobile stations in the center cell. In a small cell system, interference will be 
the dominating factor and thermal noise can be neglected. Thus the S/I ratio can 
be given as: 


S. 1 
= ес (5.13) 


where: 

2 = у = 5 = the propagation path loss, and у depends upon the terrain 
environment (see Chapter 3) 

D, = the distance between mobile and kth interfering cell 

R = the cell radius 
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If we assume D, is the same for the six interfering cells for simplification, or 
D = Dg, then Equation 5.13 becomes: 


Bus edad 
I dg v (5.14) 
where: 
q = D/R, reuse ratio 
1/ 
m Kal 4 (5.15) 


N= «S (5.16) 


Example 5.2 

Consider the advanced mobile phone system in which an S/I ratio of 18dB is 
required for the accepted voice quality. What should be the reuse factor for the 
system? Assume y = 4. What will be the reuse factor of the Global System of 
Mobile (GSM) system in which an S/I of 12. dB is required? 


Solution 
Using Equation 5.16, we get 


N 


Ex! 1.8)]2/4 — AS 
AMETS 31610 )]^^26.486—7 


and 


-1 2) 2/4 — T 
Nosy = 161012) = 3251 = 4 
Example 5.3 
Consider a cellular system with 395 total allocated voice channel frequencies. If 
the traffic is uniform with an average call holding time of 120 seconds and the call 
blocking during the system busy hour is 2%, calculate: 

1. The number of calls per cell site per hour (i.e., call capacity of cell) 

2. Mean S/I ratio for cell reuse factor equal to 4, 7, and 12. 
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Assume omnidirectional antennas with six interferers in the first tier and a slope 


for path loss of 40 dB/decade (y = 4). 


Solution 

For a reuse factor N = 4, the number of voice channels per cell site = 395/4 = 99. 
Using the Erlang-B traffic table (see Appendix A) for 99 channels with 2% blocking, 
we find a traffic load of 87Erlangs. The carried load will be (1 — 0.02) x 87 = 
85.26 Erlangs. 


ee Nai Е УУ 


3600 


Мың = 2558 calls/hour/cell 


ca. 


Using Equation 5.16, we get 


29 = 24 (13.8dB) 


The results for N = 7 and N = 12 are given in Table 5.2. 

It is evident from the results that, by increasing the reuse factor from N — 4 
to N — 12, the mean S/I ratio is improved from 13.8 to 23.3dB. However, the 
call capacity of cell (i.e., calls per hour per cell) is reduced from 2558 to 724 calls 
per hour. 


Table 5.2 Cell reuse factor vs. mean S// ratio and call capacity of cell. 


N Voice channels per cell Calls per hour per cell (Noan) Mean S/I (dB) 


4 99 2558 13.8 
7 56 1349 18.7 
12 33 724 23.3 
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Example 5.4 

Consider a GSM system with a one-way spectrum of 12.5 MHz and channel 
spacing of 200 kHz. There are three control channels per cell, and the reuse factor 
is 4. Assuming an omnidirectional antenna with six interferers in the first tier and 
a slope of path loss of 40 dB/decade, calculate the number of calls per hour per cell 
site with 2% blocking during the system busy hour and an average call holding 
time of 120 seconds. The GSM uses eight voice channels per RF channel. 


Solution 


; : 4 — 12.5 х 10°X8 _ 4. 

г. No. of voice channels per cell site 30d Sc 08 5а 3 = 122 
Using the Erlang-B traffic table for 122 channels with 2% blocking, we find а 

traffic load of 110Erlangs. The carried traffic load will be (1 — 0.02) X 110 = 107.8 


N x 120 


5 call _ 
NT ^. 3600 = 107.8 


N = 3234 calls/hour/cell 


Using Equation 5.16 we calculate the mean S/I ratio as 13.8 dB. 


5.5 Cellular System Design in Worst-Case Scenario with 
an Omnidirectional Antenna 

In the previous section we showed that with a seven-reuse pattern (N — 7), the 
value of q — 4.6 (see Table 5.1) is adequate for a normal interference condition 
[5]. Let us reexamine the seven-cell reuse pattern and consider the worst case 
in which the mobile unit is located at the cell boundary as shown in Figure 5.6. 
In this situation, the mobile unit receives the weakest signal from its own cell and 
is subjected to strong interference from all the interfering cells in the first tier. 
The distances from the six interfering cells are given in Figure 5.6. 


The S/I ratio can be given as: 


S К> 
= 17 
I 2(р—К) HID YD + КЮ) Y pum 


Using the path-loss exponent y = 4 and D/R = q, we rewrite Equation 5.17 as: 


Be 1 5.18 
I 2(q-1)-4 + 2q-4 + 2(q*1)* ( 
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Figure 5.6 Worst-case scenario for cochannel interference. 


where: 
q = 4.6 for a normal seven-cell reuse pattern (N = 7). 


Substituting q = 4.6 in Equation 5.18, we get S/I = 54.3 or 17.3dB. For a 
conservative estimate, if we use the shortest distance (D—R) then 


S 1 1 
= = = 28 or 14.47 dB 5.19 
I 64-1) 63.64 ul pd 


Ina real situation, because of imperfect cell-site locations and the rolling nature 
of the terrain configuration, the S/I ratio is often less than 17.3 dB. It could be 14 dB 
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or lower. Such conditions may occur in heavy traffic. Therefore, the cellular system 
should be designed around the S/I ratio of worst case. If we consider the worst case 
for a seven-cell reuse (N = 7) pattern, we conclude that g = 4.6 is not enough in 
an omnidirectional cell system. In an omnidirectional cell system, N = 9 (q = 5.2) 
or N = 12 (q = 6.0) cell reuse pattern would be a better choice. These cell reuse 
patterns would provide the S/I ratio of 19.78 and 22.54 dB, respectively. 


5.6 Cochannel Interference Reduction 

In the case of increased call traffic, the frequency spectrum should be used 
efficiently. We should avoid increasing the number of cells N in a frequency reuse 
pattern. As N increases, the number of frequency channels assigned to a cell is 
reduced, thereby decreasing the call capacity of the cell [7]. 

Instead of increasing N, we use either a directional antenna arrangement (sec- 
torization) to reduce cochannel interference or perform cell splitting to subdivide a 
congested cell into smaller cells. In case of a sectorized cell, each cell is divided into 
three or six sectors and uses three or six directional antennas at the base station 
to reduce the number of cochannel interferers (refer to Figures 5.7 and 5.8). Each 


Two Interferers in First 
Ring per Sector 


— —» Cell Site-to-Mobile Interference (Downlink) 
eee »  Mobile-to-Cell Site Interference (Uplink) 


Figure 5.7 Cochannel interference with 120? sectorized cells. 
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re > Mobile-to-Cell Site Interference (Uplink) 


Figure 5.8 Cochannel interference with 60° sectorized cells. 


sector is assigned a set of channels (frequencies) (either 1/3 or 1/6 of the frequen- 
cies of the omnidirectional cell). 


5.7 Directional Antennas in Seven-Cell Reuse Pattern 


5.7.1 Three-Sector Case 

We consider the worst case in which the mobile unit is at position M (see Figure 5.9). 
In this situation, the mobile receives the weakest signal from its own cell and fairly 
strong interference from two interfering cells 1 and 2. Because of the use of direc- 
tional antennas, the number of interfering cells is reduced from six to two. At point 
M, the distances between the mobile unit and the two interfering cells are D and 
(D + 0.7R), respectively. The S/I ratio in the worst case with y = 4 will be: 


S R-4 
I D-4++(D+0.7R)-4 (5:20) 


5 1 
I q+ (9 + 0.7)-* et) 
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(2) Interfering sector 


Figure 5.9 Worst-case interference with 120° sectorized cells. 


Using q = 4.6 in Equation 5.21 for N = 7, we get S/I = 285 or 24.5 dB. The 
S/I for a mobile unit served by a cell site with 120° directional antenna exceeds 
18 dB in the worst case. It is evident from Equation 5.21 that the use of a direc- 
tional antenna is helpful in reducing cochannel interference. In a real situation, 
under heavy traffic, the S/I could be up to 6dB weaker than in Equation 5.21 
due to irregular terrain configurations and imperfect site locations. The resulting 
18.5 dB S/I is still adequate. 


5.7.2 Six-Sector Case 

In this case the cell is divided into six sectors by using a 60? beam width direc- 
tional antenna. In this case, only one interference can occur. The worst case S/I 
ratio with y — 4 will be (see Figure 5.10): 


S R= = 4 
a Шү (5.22) 


For q = 4.6 (М = 7), Equation 5.22 gives S/I = 789 or 29 dB. This indicates 
a further reduction in cochannel interference. Using the argument that was used 
for the three-sector case and subtracting 6 dB from 29 dB, the remaining 23 dB is 
still more than adequate. Under heavy traffic, the 60° sector configuration can be 
used to reduce cochannel interference. However, with the six-sector configura- 
tion, the call capacity of the cell is decreased. 
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(1) Interfering sector 


M Mobile unit 


Figure 5.10 Worst-case interference with 60° sectorized cells. 


Example 5.5 

We consider a cellular system with 395 total allocated voice channels of 30kHz 
each. The total available bandwidth in each direction is 12.5 MHz. The traffic 
is uniform with the average call holding time of 120 seconds, and call blocking 
during the system busy hour is 2%. 


Calculate: 
a. The calls per hour per cell site 


b. The mean S/I ratio 
c. The spectral efficiency in Erlang/km?/MHz 


For a cell reuse factor N = 4, 7, and 12, respectively, and for omnidirectional 
(see Example 5.3) 120° and 60° antenna systems, calculate the call capacity. Assume 
that there are 10 mobiles/km? with each mobile generating traffic of 0.02 Erlangs. 
The slope of path loss is у = 40 dB per decade. The mean S/I ratio is given as: 


Mean 3 = ylogv3N—10logm 


where: 
y = slope of path loss (dB/decade) 
m = number of interferers in the first tier 
m = 6 for omnidirectional system 
m = 2 for 120° sectorized system 
m = 1 for 60° sectorized system 
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Solution 
We consider only the first tier interferers and neglect the effects of cochannel 
interference from the second and other higher tiers. 


The traffic carried per cell site = V x t X A, = V X t X 2.6R? Erlangs 


where: 
V = number of mobiles per km? 
t = traffic in Erlangs per mobile 


A, = area of hexagonal cell (i.e., Ac = 2.6R?) 
The traffic carried per cell site = 10 x 0.02 x 2.6R? = 0.52 R? Erlangs 


Traffic per cell х Ne 


2 
B, XA Erlangs/km*/MHz 


The spectral efficiency = 


where: 
N, = number of cells in the system (i.e., A/2.6R7) and 
A = area of the system 


Traffic per cell 
2.6R2 X By 
We will demonstrate the procedure for calculating results in one row 
in Table 5.3; the remaining calculations can be performed without any dif- 
ficulty. 


The spectral efficiency = Erlangs/km?/MHz 


120° Sectorized Cell 
а. N77 
b. Number of voice channels per sector = 395/(7 х 3) = 19 
c. Offered traffic load per sector from Erlang-B tables — 12.3 Erlangs 
d. Offered traffic load per cell site = 3 X 12.3 = 36.9 Erlangs 
e. Carried traffic load per cell site — (1 — 0.02) x 36.9 — 36.2 Erlangs 


No. of calls per hour per cell site — 36.2 X 3600 = 1086 


= [36.2 _ 
R 0-52 8.3km 


Spectral efficiency = Em TEES Ep 0.016 Erlang/km?/MHz 


Mean S/I = 40log/21 —10log2 = 26.44 — 3.01 = 23.43dB 
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Table 5.3 Omni vs. sectorized cellular system performance. 


Calls/ 
hour/ Required Spectral 
Channels Offered Carried cell cell efficiency Mean 
per load/ load/ (cell radius R E/km?/ S/I 
System N sector cell (E) cell (E) capacity) (km) MHz (dB) 
Omni 4 99 87.0 85.3 2558 12.8 0.016 13.8 
56 45.9 45.0 1349 9.3 0.016 18.7 
12 33 24.6 24.1 724 6.8 0.016 23.3 
120° 
Sector 4 33 73.8 72.3 2169 11.8 0.016 18.6 
7 19 36.9 36.2 1086 8.3 0.016 23.4 
12 11 17.5 17.2 516 5.8 0.016 28.1 
60° 
Sector 3 22 84.2 82.6 2477 12.6 0.016 19.1 
4 17 64.2 62.9 1887 11.0 0.016 21.6 
26.0 25.5 765 7.0 0.016 26.4 
12 6 13.7 13.4 402 5.1 0.016 31.1 


From the results in Table 5.3, we can draw the following conclusions: 


1. Sectorization reduces cochannel interference and improves the mean 
S/I ratio for a given cell reuse factor. However, it reduces cell capacity 
since the channel resource is distributed more thinly among various 
sectors. 


2. Since a sectorized cellular system has fewer cochannel interferers, it is 
possible to reduce the cluster size. 


3. An omnidirectional cellular system requires a cluster size of 7, while a 120° 
sectorized system requires a cluster size of 4 and a 60° sectorized system 
requires a cluster size of 3 for a desired mean S/I ratio of approximately 
18 dB. 


5.8 Cell Splitting 

After a cellular system has been in operation, traffic will grow in the system and 
will require that additional channels be made available. The cell with heavy traf- 
fic is split into smaller cells (see Figure 5.11) [10]. This is done in such a way that 
cell areas, or the individual component coverage areas of the cellular system, are 
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Growing by splitting cell numbered 4 into cells of 
small size 


2a c Radius of big cell: F 
EOS. d Radius of small cell: Н/2 


Figure 5.11 Cell splitting. 


further divided to yield yet more cell areas. The splitting of cell areas by adding 
new cells provides for an increasing amount of channel reuse and, hence, increas- 
ing system capacity. 

When cell splitting occurs, the designer should minimize changes in 
the system. The value of the reuse factor, N, is important with respect to the 
type of split. The following splitting patterns can be used for various values 
of N: 


* For N — 3, use 4:1 cell splitting. 
* For N — 4, use 3:1 cell splitting. 
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* For N = 7, use 3:1 or 4:1 cell splitting. 
* For N = 9, use 4:1 cell splitting. 


The 4:1 cell splitting works as follows. When the new cell is located on the 
border between two existing cell areas, the new cell will cover an area with a 
radius of one-half that of the larger cell areas from which it was split. Thus, the 
area covered by the new cell is one-fourth of the area of the old cell; hence, this is 
called 4:1 splitting. For example, if the old cell had a radius of 8 km, the new cell 
would have a radius of 4 km. 

The 3:1 cell splitting works as follows. When the new cell is located on the 
corner between the cell areas covered by three existing cells, the radius of the cell 
area covered by the new cell would be 1//3 of the radius of the cell areas covered 
by the existing cell sites. Thus, the new coverage area is only one-third of the 
larger cell's coverage area; hence, this is called 3:1 splitting. 

Decreasing cell radii imply that cell boundaries will be crossed more often. 
This will result in more handoffs per call and a higher processing load per sub- 
scriber. Simple calculations show that a reduction in a cell radius by a factor of four 
will produce about a tenfold increase in the handoff rate per subscriber. Since the 
call processing load tends to increase geometrically with the increase in the number 
of subscribers, with cell splitting the handoff rate will increase exponentially. There- 
fore, it is desirable to perform a cost-benefit analysis to compare the overall cost of 
cell splitting versus other available alternatives to handle increased traffic load. 

The large cell with radius R is split into cells with radius R/2. Let d be the 
separation between the transmitter and receiver, and do be the distance from the 
transmitter to a close-in reference point. Po is the power received at the close-in 
reference point. The average received power, P, , is given by: 


P, = Py S| (5.23) 


Expressing Equation 5.23 in decibels, we have: 


P, (dBm) = Po(dBm) — 10ylog 


A (5.24) 


Pn and Py are the transmit power of the large cell (radius К) base station 
and small cell (radius R/2) base station, respectively. The received power, P, at the 
large cell boundary is proportional to РЁ ”, and P, at the small cell boundary is 
proportional to Р,(К/2) 7. On the basis of equal power, we get 


РАК ?= рД&)' (5.25) 
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or 


Рд 


LH LA 5.26 
pn ( ) 


For y = 4, РА/Рь = 16 (12 dB). Thus, with cell splitting, where the radius 
of the new cell is one-half of that of the old cell, we achieve a 12 dB reduction in 
the transmit power. 


5.9 Adjacent Channel Interference (ACI) 


Signals which are adjacent in frequency to the desired signal cause adjacent chan- 
nel interference [7,8]. ACI is brought about primarily because of imperfect receiver 
filters which allow nearby frequencies to move into the pass band, and nonlinear- 
ity of the amplifiers. The ACI can be reduced by: (1) using modulation schemes 
which have low out-of-band radiation; (2) carefully designing the bandpass filter 
at the receiver front end; and (c) assigning adjacent channels to different cells in 
order to keep the frequency separation between each channel in a given cell as 
large as possible. The effects of ACI can also be reduced using advanced signal 
processing techniques that employ equalizers. 


5.10 Segmentation 

Sometimes engineers have to add an additional cell at less than the reuse distance 
without using a complete cell splitting process. This method might be used to fill 
in a coverage gap in the system. This can result in cochannel interference. The 
most straightforward method to avoid an increase in cochannel interference is 
simply not to reuse them. Segmentation divides a channel group into segments of 
mutually exclusive channel frequencies. Then, by assigning different segments to 
particular cell sites, cochannel interference between these cell sites can be avoided. 
The disadvantage of segmentation is that the capacity of the segmented cells is 
lower than the unsegmented cell. 

When a cellular system is growing, there may be cells of different radii in 
the same region of the coverage area. This also can result in cochannel interfer- 
ence. By dividing the radii at the cell site into two separate serving groups, one 
for the larger (overlaid) cell and other for the smaller (underlaid) cell, the interfer- 
ence can be minimized (see Figure 5.12). The radii for the primary serving group 
serve the underlaid cell, and the radii of the secondary serving group are used to 
serve mobiles in the overlaid cell areas. As traffic in the smaller cells grows, more 
and more channels are removed from the secondary serving group and assigned to 
the primary group until the secondary group (and its larger cell) disappears. 
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Underlaid Cell 


Overlaid Cell 


Note: Total channels N are divided between 
two segments as N, and N, 


Figure 5.12 Cell segmentation. 


5.11 Summary 

In this chapter, we developed a relationship between the reuse ratio (4) and cell 
cluster size (N) for the hexagonal geometry. Cochannel interference ratios for the 
omnidirectional and sectorized cell were derived. A numerical example was given 
to demonstrate that, for a given cluster size, sectorization yields a higher S/I ratio, 
but reduces spectral efficiency. However, it is possible to achieve a higher spectral 
efficiency by reducing the cluster size in a sectorized system without lowering the 
S/I ratio below the minimum requirement. We concluded the chapter by discuss- 
ing cell splitting, adjacent channel interference, and segmentation. 
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Problems 


5.1 
5.2 
5.3 
5.4 


5.5 


5.6 


5.7 


5.8 


5.9 


Why is cell splitting needed? Define 4:1 and 3:1 cell splitting. 
Explain segmentation in a cellular system. Why is it required? 
What is adjacent channel interference? How can it be minimized? 


The S/I ratio was calculated by neglecting the interference from cells 
other than in the first tier. Calculate the amount of interference from the 
second tier of cells. Is it reasonable to neglect this interference? 


Consider a GSM system with a one-way spectrum of 12.5 MHz and chan- 
nel spacing of 200kHz. There are three control channels per cell and the 
reuse factor is 4. Assuming an omnidirectional antenna with six interferers 
in the first tier and slope for path loss of 45 dB/decade, calculate the number 
of calls per cell site per hour with 2% blocking during system busy hour 
and an average call holding time of 120 seconds. What is the S/I ratio? 


Repeat Problem 5.5 with 3-sector and 6-sector antenna systems. Discuss 
your results with an omnidirectional antenna and provide comments. 


Compare the spectral efficiency of the GSM system with the total access 
communication system (TACS) using the following data: 


• GSM channel spacing: 200 kHz 

* TACS channel spacing: 25 kHz 

* The required S/I for the GSM: 12 dB 

* The required S/I for the TACS: 16 dB 

* The total available one-way spectrum: 25 MHz 

* The number of control channels for GSM per cell: 3 

* The number of control channels for TACS per cell: 6 

* The reuse factor for GSM: 4 

* The reuse factor for TACS: 7 

* Total coverage area: 10,000 km? 

A signal-to-interference ratio of 16 dB is required for a satisfactory forward 
link performance of a cellular system. What is the frequency reuse factor 
and cluster size that should be used for maximum capacity if the path loss 
is 40 dB/decade? Assume that there are six cochannel interferers in the first 


tier and all of them are the same distance from the mobile. Neglect interfer- 
ence from higher tiers. 


A suburb has an area of 1500square miles and is covered by a cellular 
system that uses a seven reuse pattern. Each cell has a radius of four miles 
and the city is allocated 50 MHz of spectrum of a full duplex channel 
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bandwidth of 60kHz. Assuming a GoS of 2% for an Erlang-B system 
and a traffic load per user of 0.03 Erlangs, calculate: 


* The number of cells in the service area 

* The number of channels per cell 

* The maximum carried traffic 

e Traffic intensity of each cell 

* Total number of users that can be served for 2% GoS 


* Number of mobiles per channel 
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CHAPTER 6 


Multiple Access Techniques 


6.1 Introduction 

In Chapter 5 we discussed that cellular systems divide a geographic region into 
cells where mobile units in each cell communicate with the cell’s base station. The 
goal in the design of a cellular system is to be able to handle as many calls as pos- 
sible in a given bandwidth with the specified blocking probability (reliability). 

Multiplexing deals with the division of the resources to create multiple chan- 
nels. Multiplexing can create channels in frequency, time, etc., and the corre- 
sponding terms are then frequency division multiplexing (FDM), time division 
multiplexing (TDM), etc. [1,3]. Since the amount of spectrum available is limited, 
we need to find ways to allow multiple users to share the available spectrum 
simultaneously. Shared access is used to implement a multiple access scheme when 
access by many users to a channel is required [13,14,15]. For example, one can 
create multiple channels using TDM, but each of these channels can be accessed 
by a group of users using the ALOHA multiple access scheme [8,9]. The multiple 
access schemes can be either reservation-based or random. 

Multiple access schemes allow many users to share the radio spectrum. 
Sharing the bandwidth efficiently among users is one of the main objectives of 
multiple access schemes [16,17]. The variability of wireless channels presents 
both challenges and opportunities in designing multiple access communications 
systems. Multiple access strategy has an impact on robustness and interference 
levels generated in other cells. Therefore, multiple access schemes are designed to 
maintain orthogonality and reduce interference effects [10]. 

Multiple access schemes can be classified as reservation-based multiple 
access (e.g., FDMA, TDMA, CDMA) [4,5] and random multiple access (e.g., 
ALOHA, CSMA) (see Figure 6.1) [9,23]. If data traffic is continuous and a small 
transmission delay is required (for example in voice communication) reservation- 
based multiple access is used. The family of reservation-based multiple access 
includes frequency division multiple access (FDMA), time division multiple access 
(TDMA), and code division multiple access (CDMA) [6,7,12,21,22]. In many 
wireless systems for voice communication, the control channel is based on random 
multiple access and the communication channel is based on FDMA, TDMA, or 
CDMA. The reservation-based multiple access technique has a disadvantage in 
that once the channel is assigned, it remains idle if the user has nothing to transmit, 
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Figure 6.1 Multiple access schemes. 


while other users may have data waiting to be transmitted. This problem is critical 
when data generation is random and has a high peak-rate to average-rate ratio. 
In this situation, random multiple access is more efficient, because a communica- 
tion channel is shared by many users and users transmit their data in a random or 
partially coordinated fashion. ALOHA and carrier sense multiple access (CSMA) 
are examples of random multiple access [8]. If the data arrives in a random man- 
ner, and the data length is large, then random multiple access combined with 
a reservation protocol will perform better than both random- and reservation- 
based schemes. 

We first focus on the reservation-based multiple access schemes including 
narrowband channelized and wideband nonchannelized systems for wireless 
communications. We discuss access technologies — FDMA, TDMA, and CDMA. 
We examine FDMA and TDMA from a capacity, performance, and spectral effi- 
ciency viewpoint. As networks have evolved, the demand for higher capacities 
has encouraged researchers and system designers to examine access schemes that 
are even more spectrally efficient than TDMA. Therefore, we also examine the 
CDMA system. Work in standards bodies around the world indicates that the 
3G/4G wireless systems are evolving to wideband COMA (WCDMA) to achieve 
high efficiencies and high access data rates. The later part of the chapter is devoted 
to the discussion of random multiple access schemes. 


6.2 Narrowband Channelized Systems 


Traditional architectures for analog and digital wireless systems are channelized 
[6,11]. In a channelized system, the total spectrum is divided into a large number of 
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relatively narrow radio channels that are defined by carrier frequency. Each radio 
channel consists of a pair of frequencies. The frequency used for transmission 
from the base station to the mobile station is called the forward channel (down- 
link channel) and the frequency used for transmission from the mobile station to 
the base station is called the reverse channel (uplink channel). A user is assigned 
both frequencies for the duration of the call. The forward and reverse channels 
are assigned widely separated frequencies to keep the interference between trans- 
mission and reception to a minimum. 

A narrowband channelized system demands precise control of output fre- 
quencies for an individual transmitter. In this case, the transmission by a given 
mobile station occurs within the specified narrow bandwidth to avoid interference 
with adjacent channels. The tightness of bandwidth limitations plays a dominant 
role in the evaluation and selection of modulation technique. It also influences 
the design of transmitter and receiver elements, particularly the filters which can 
greatly affect the cost of a mobile station. 

A critical issue with regulators and operators around the world is how effi- 
ciently the radio spectrum is being used. Regulatory bodies want to encourage 
competition for cellular services. Thus for a given availability of bandwidth, more 
operators can be licensed. For a particular operator, a more efficient technology 
can support more users within the assigned spectrum and thus increase profits. 

When we examine efficiencies of various technologies, we find that each sys- 
tem has made different trade-offs in determining the optimum method for access. 
Some of the parameters that are used in the trade-off are bandwidth per user, 
guard bands between channels, frequency reuse among different cells in the sys- 
tem, the signal-to-noise and signal-to-interference ratio, the methods of channel 
and speech coding, and the complexity of the system. 

The first-generation analog cellular systems showed signs of capacity satu- 
ration in major urban areas, even with a modest total user population. A major 
capacity increase was needed to meet future demand. Several digital techniques 
were deployed to solve the capacity problem of analog cellular systems. There 
are two basic types of systems whereby a fixed spectrum resource is partitioned 
and shared among different users [13,16]. The channels are created by dividing 
the total system bandwidth into frequency channels through the use of FDM and 
then further dividing each frequency channel into time channels through the use 
of TDM. Most systems use a combination of FDMA and TDMA. 


6.2.1 Frequency Division Duplex (FDD) and Time Division Duplex 
(TDD) System 

Many cellular systems (such as AMP, GSM, DAMP, etc.) use frequency division 

duplex (FDD) in which the transmitter and receiver operate simultaneously on 

different frequencies. Separation is provided between the downlink and uplink 

channels to avoid the transmitter causing self interference to its receiver. Other 
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precautions are also needed to prevent self interference, such as the use of two 
antennas, or alternatively one antenna with a duplexer (a special design of RF 
filters protecting the receiver from the transmit frequency). A duplexer adds 
weight, size, and cost to a radio transceiver and can limit the minimum size of a 
subscriber unit. 

A cellular system can be designed to use one frequency band by using time 
division duplex (TDD). In TDD a bidirectional flow of information is achieved 
using the simplex-type scheme by automatically alternating in time the direction 
of transmission on a single frequency. At best TDD can only provide a quasi- 
simultaneous bidirectional flow, since one direction must be off while the other is 
using the frequency. However, with a high enough transmission rate on the chan- 
nel, the off time is not noticeable during conversations, and with a digital speech 
system, the only effect is a very short delay. 

The amount of spectrum required for both FDD and TDD is the same. The 
difference lies in the use of two bands of spectrum separated by the required band- 
width for FDD, whereas TDD requires only one band of frequencies but twice the 
bandwidth. It may be easier to find a single band of unassigned frequencies than 
finding two bands separated by the required bandwidth. 

With TDD systems, the transmit time slot and the receiver time slot of the 
subscriber unit occur at different times. With the use of a simple RF switch in the 
subscriber unit, the antenna can be connected to the transmitter when a transmit 
burst is required (thus disconnecting the receiver from the antenna) and to the 
receiver for the incoming signal. The RF switch thus performs the function of the 
duplexer, but is less complex, smaller in size, and less costly. TDD uses a burst 
mode scheme like TDMA and therefore also does not require a duplexer. Since 
the bandwidth of a TDD channel is twice that of a transmitter and receiver in an 
FDD system, RF filters in all the transmitters and receivers for TDD systems must 
be designed to cover twice the bandwidth of FDD system filters. 


6.2.2 Frequency Division Multiple Access 
The FDMA is the simplest scheme used to provide multiple access. It separates 
different users by assigning a different carrier frequency (see Figure 6.2). Multiple 
users are isolated using bandpass filters. In FDMA, signals from various users are 
assigned different frequencies, just as in an analog system. Frequency guard bands 
are provided between adjacent signal spectra to minimize crosstalk between adja- 
cent channels. 

The advantages and disadvantages of FDMA with respect to TDMA or 
CDMA are: 


Advantages 
1. Capacity can be increased by reducing the information bit rate and using 
an efficient digital speech coding scheme (See Chapter 8) [20]. 
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2. Technological advances required for implementation are simple. A system 
can be configured so that improvements in terms of a lower bit rate speech 
coding could be easily incorporated. 


3. Hardware simplicity, because multiple users are isolated by employing 
simple bandpass filters. 


Disadvantages 

1. The system architecture based on FDMA was implemented in first- 
generation analog systems such as advanced mobile phone system (AMPS) 
or total access communication system (TACS). The improvement in capac- 
ity depends on operation at a reduced signal-to-interference (S/I) ratio. 
But the narrowband digital approach gives only limited advantages in this 
regard so that modest capacity improvements could be expected from the 
allocated spectrum. 


2. The maximum bit-rate per channel is fixed and small, inhibiting the 
flexibility in bit-rate capability that may be a requirement for computer file 
transfer in some applications in the future. 
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Figure 6.2 FDMA/FDD channel architecture. 
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3. Inefficient use of spectrum, in FDMA if a channel is not in use, it remains 
idle and cannot be used to enhance the system capacity. 


4. Crosstalk arising from adjacent channel interference is produced by non- 
linear effects. 


6.2.3 Time Division Multiple Access 

In a TDMA system, each user uses the whole channel bandwidth for a fraction of 
time (see Figure 6.3) compared to an FDMA system where a single user occupies 
the channel bandwidth for the entire duration (see Figure 6.2) [2]. In a TDMA 
system, time is divided into equal time intervals, called slots. User data is trans- 
mitted in the slots. Several slots make up a frame. Guard times are used between 
each user's transmission to minimize crosstalk between channels (see Figure 6.4). 
Each user is assigned a frequency and a time slot to transmit data. The data is 
transmitted via a radio-carrier from a base station to several active mobiles in the 
downlink. In the reverse direction (uplink), transmission from mobiles to base 
stations is time-sequenced and synchronized on a common frequency for TDMA. 
The preamble carries the address and synchronization information that both the 
base station and mobile stations use for identification. 
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Figure 6.3 TDMA/FDD channel architecture. 
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Figure 6.4 TDMA frame. 


In a TDMA system, the user can use multiple slots to support a wide range 
of bit rates by selecting the lowest multiplexing rate or multiple of it. This enables 
supporting a variety of voice coding techniques at different bit rates with differ- 
ent voice qualities. Similarly, data communications customers could use the same 
kinds of schemes, choosing and paying for the digital data rate as required. This 
would allow customers to request and pay for a bandwidth on demand. 

Depending on the data rate used and the number of slots per frame, a 
TDMA system can use the entire bandwidth of the system or can employ an FDD 
scheme. The resultant multiplexing is a mixture of frequency division and time 
division. The entire frequency band is divided into a number of duplex channels 
(about 350 to 400kHz). These channels are deployed in a frequency-reuse pat- 
tern, in which radio-port frequencies are assigned using an autonomous adaptive 
frequency assignment algorithm. Each channel is configured in a TDM mode for 
the downlink direction and a TDMA mode for the uplink direction. 

The advantages and disadvantages of TDMA are: 


Advantages 

1. TDMA permits a flexible bit rate, not only for multiples of the basic 
single channel rate but also submultiples for low bit rate broadcast-type 
traffic. 

2. TDMA offers the opportunity for frame-by-frame monitoring of signal 
strength/bit error rates to enable either mobiles or base stations to initiate 
and execute handoffs. 

3. TDMA, when used exclusively and not with FDMA, utilizes bandwidth 


more efficiently because no frequency guard band is required between 
channels. 
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4. TDMA transmits each signal with sufficient guard time between time 
slots to accommodate time inaccuracies because of clock instability, delay 
spread, transmission delay because of propagation distance, and the tails 
of signal pulse because of transient responses. 


Disadvantages 
1. For mobiles and particularly for hand-sets, TDMA on the uplink demands 
high peak power in transmit mode, that shortens battery life. 


2. TDMA requires a substantial amount of signal processing for matched 
filtering and correlation detection for synchronizing with a time slot. 


3. TDMA requires synchronization. If the time slot synchronization is lost, 
the channels may collide with each other. 


4. One complicating feature in a TDMA system is that the propagation time 
for a signal from a mobile station to a base station varies with its distance 
to the base station. 


6.3 Spectral Efficiency 
An efficient use of the spectrum is the most desirable feature of a mobile commu- 
nications system. To realize this, a number of techniques have been proposed or 
already implemented. Some of these techniques used to improve spectral efficiency 
are reducing the channel bandwidth, information compression (low-rate speech 
coding), variable bit rate codec (see Chapter 8), improved channel assignment algo- 
rithms (dynamic channel assignment), and so on [11,17,19]. Spectral efficiency of 
a mobile communications system shows how efficiently the spectrum is used by 
the system. Spectral efficiency of a mobile communications system depends on the 
choice of a multiple access scheme. The measure of spectral efficiency enables one 
to estimate the capacity of a mobile communications system. 

The overall spectral efficiency of a mobile communications system can be 
estimated by knowing the modulation and the multiple access spectral efficiencies 
separately [16]. 


6.3.1 Spectral Efficiency of Modulation 
The spectral efficiency with respect to modulation is defined as [16]: 


(Total Number of Channels Available in the System) (6.1a) 
т = . 
(Bandwidth)(Total Coverage Area) 
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— — 2 
Ш ЕСЕМ Д. Channels/MHz/km (6.1c) 
where: 
nm = modulation efficiency (channels/.MHz/km?) 


B,, = bandwidth of the system (MHz) 

B, — channel spacing (MHz) 

N, = total number of cells in the covered area 

N - frequency reuse factor of the system (or cluster size) 
A, = area covered by a cell (km?) 


Equation 6.1c indicates that the spectral efficiency of modulation does not 
depend on the bandwidth of the system. It only depends on the channel spacing, 
the cell area, and the frequency reuse factor, N. By reducing the channel spacing, 
the spectral efficiency of modulation for the system is increased, provided the cell 
area (A,) and reuse factor (N) remain unchanged. If a modulation scheme can be 
designed to reduce N then more channels are available in a cell and efficiency is 
improved. 

Another definition of spectral efficiency of modulation is Erlangs/MHz/km? 


Maximum Total Traffic Carried by System (6.2a) 
ges (System Bandwidth)(Total Coverage Area) 
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By introducing the trunking efficiency factor, n: in Equation 6.2b (<1, it is 
a function of the blocking probability and number of available channels per cell), 
the total traffic carried by the system is given as: 


" Hume 
E N 6.2c 
SA an 
dii ud (6.24) 
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where: 


т; is a function of the blocking probability and the total number of available 
В,„ІВ, 
М 


channels per cell 
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Based on Equation 6.2d we can conclude: 


1. The voice quality will depend on the frequency reuse factor, N, which is a 
function of the signal-to-interference (S/I) ratio of the modulation scheme 
used in the mobile communications system (see Chapter 5). 

2. The relationship between system bandwidth, B,,, and the amount of traffic 
carried by the system is nonlinear, i.e., for a given percentage increase in 
В, the increase in the traffic carried by the system is more than the increase 
in By. 

3. From the average traffic per user (Erlang/user) during the busy hour and 
Erlang/MHz/km^?, the capacity of the system in terms of users/km?/MHz 
can be obtained. 


4. The spectral efficiency of modulation depends on the blocking probability. 


Example 6.1 


In the GSM800 digital channelized cellular system, the one-way bandwidth of the 
system is 12.5 MHz. The RF channel spacing is 200 kHz. Eight users share each 
RF channel and three channels per cell are used for control channels. Calculate 
the spectral efficiency of modulation (for a dense metropolitan area with small 
cells) using the following parameters: 


* Area of a cell = 8km? 

e Total coverage area = 4000 km? 

* Average number of calls per user during the busy hour = 1.2 
e Average holding time of a call = 100 seconds 

* Call blocking probability = 2% 


* Frequency reuse factor — 4 


Solution 


Number of 200 kHz RF channels = Т5 1000 = 62 


Number of traffic channels = 62 х 8 = 496 


Number of signaling channels per cell = 3 


Number of traffic channels per cell = ae —3 = 121 
silty = 500 


Number of cells = 


With 2% blocking for an omnidirectional case, the total traffic carried by 
121 channels (using Erlang-B tables) = 108.4 (1.0 — 0.02) = 106.2 Erlangs/cell 
or 13.28 Erlangs/km? 
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Number of calls per hour per cell — геи = 3823, calls/hour/km? = 
S — 477.9calls/hour/km? 
Max. number of users/cell/hour — S — 3186, users/hour/channel — 


26.33 


3186 _ 
121 


_ (Erlangs per cell) X no. of cells _ 106.2 х 500 


Nm 
By X Coverage Area 12.5 x 4000 


= 1.06 Erlangs/MHz/km? 


6.3.2 Multiple Access Spectral Efficiency 

Multiple access spectral efficiency is defined as the ratio of the total time or 
frequency dedicated for traffic transmission to the total time or frequency available 
to the system. Thus, the multiple access spectral efficiency is a dimensionless 
number with an upper limit of unity. 

In FDMA, users share the radio spectrum in the frequency domain. In FDMA, 
the multiple access efficiency is reduced because of guard bands between chan- 
nels and also because of signaling channels. In TDMA, the efficiency is reduced 
because of guard time and synchronization sequence. 


FDMA Spectral Efficiency 
For FDMA, multiple access spectral efficiency is given as: 


BN 
A =1 (6.3) 


Na = multiple access spectral efficiency 

Мт = total number of traffic channels in the covered area 
В, = channel spacing 

By = system bandwidth 


Example 6.2 
In a first-generation AMP system where there are 395 channels of 30kHz each 


in a bandwidth of 12.5 MHz, what is the multiple access spectral efficiency for 
FDMA? 


Solution 


30 x 395 


Na = 72.5 х 1000 — 0-248 
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TDMA Spectral Efficiency 

TDMA can operate as wideband or narrowband. In the wideband TDMA, the 
entire spectrum is used by each individual user. For the wideband TDMA, multiple 
access spectral efficiency is given as: 


tM: 
Na = TP (6.4) 
where: 

т = duration of a time slot that carries data 

Ty = frame duration 

M; = number of time slots per frame 


In Equation 6.4 it is assumed that the total available bandwidth is shared 
by all users. For the narrowband TDMA schemes, the total band is divided into 
a number of sub-bands, each using the TDMA technique. For the narrowband 
TDMA system, frequency domain efficiency is not unity as the individual user 
channel does not use the whole frequency band available to the system. The mul- 
tiple access spectral efficiency of the narrowband TDMA system is given as: 


ve єз 


where: 

B, = bandwidth of an individual user during his or her time slot 

N, = number of users sharing the same time slot in the system, but having 
access to different frequency sub-bands 


6.3.3 Overall Spectral Efficiency of FDMA and TDMA Systems 
The overall spectral efficiency, n, of a mobile communications system is obtained 
by considering both the modulation and multiple access spectral efficiencies 


N — Tina (6.6) 


Example 6.3 

In the North American Narrowband TDMA cellular system, the one-way band- 
width of the system is 12.5 MHz. The channel spacing is 30 kHz and the total 
number of voice channels in the system is 395. The frame duration is 40 ms, with 
six time slots per frame. The system has an individual user data rate of 16.2 kbps 
in which the speech with error protection has a rate of 13kbps. Calculate the 
multiple access spectral efficiency of the TDMA system. 
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Solution 


The time slot duration that carries data: т = P (2 = 5.35 ms 


Ty = 40 ms, M; = 6, N, = 395, В, = 30 kHz, and В„ = 12.5 MHz 


25.35 X6. 30 х 395 _ 
Hs AD. озор ОО 


The overhead portion of the frame = 1.0 — 0.76 = 24% 


Capacity and Frame Efficiency of a TDMA System 


Cell Capacity 
The cell capacity is defined as the maximum number of users that can be sup- 
ported simultaneously in each cell. 

The capacity of a TDMA system is given by [16]: 


where: 
N, = number of channels (mobile users) per cell 
"p = bandwidth efficiency factor (<1.0) 
ш = bit efficiency (= 2 bit/symbol for QPSK, = 1 bit/symbol for GMSK as 
used in GSM) 
vf = voice activity factor (equal to one for TDMA) 
By = one-way bandwidth of the system 
R = information (bit rate plus overhead) per user 
N - frequency reuse factor 


N,XR 
By 


Spectral efficiency т = bit/sec/Hz (6.8) 
Example 6.4 

Calculate the capacity and spectral efficiency of a TDMA system using the follow- 
ing parameters: bandwidth efficiency factor ть = 0.9, bit efficiency (with QPSK) 
н. = 2, voice activity factor v; = 1.0, one-way system bandwidth B,, = 12.5 MHz, 
information bit rate R — 16.2 kbps, and frequency reuse factor N — 19. 


Solution 


| 09 x2 12.5 x 106 
1.0 16.2 х 10? x 19 


N = 734 (say 73 mobile users per cell) 
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Spectral efficiency т = EYE TE 0.094 bit/sec/Hz 


Efficiency of a TDMA Frame 
We refer to Figure 6.4 that shows a TDMA frame. The number of overhead bits 
per frame is: 


bo = N,b, + Nibp + (М, + N,)bg (6.9) 


where: 
N,= number of reference bursts per frame 
N;= number of traffic bursts (slots) per frame 
b, = number of overhead bits per reference burst 
b, = number of overhead bits per preamble per slot 
b, = number of equivalent bits in each guard time interval 


The total number of bits per frame is: 
br = Tj X Ry (6.10a) 


where: 
Ty = frame duration 
К = bit rate of the RF channel 


Frame efficiency т = (1 — bo/br) x 100% (6.10b) 


It is desirable to maintain the efficiency of the frame as high as possible. 
The number of bits рег data channel (user) рег frame is b; = RTs, where 
R = bit rate of each channel (user). 


(Total Data Bits)/(frame) 


No. of ch Is/f Ncr = 
өөн cde ch (Bits per Channel)/(frame) 


_ Wels 
Ncr = ү; (6.11a) 
R, 
Ncr = A (6.11b) 


Equation 6.11b indicates the number of time slots per frame. 
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Example 6.5 

Consider the GSM TDMA system with the following parameters: 
№, = 2 
М, = 24 frames of 120ms each with eight time slots per frame 
b, = 148 bits in each of 8 time slots 
bp = 34 bits in each of 8 time slots 
b, = 8.25 bits in each of 8 time slots 


Ty = 120ms 
R, = 270.8333333kbps 
R =22.8kbps 


Calculate the frame efficiency and the number of channels per frame. 


Solution 
bo = 2 х (8 х 148) + 24 X (8 X 34) + 8 X 8.25 = 10,612 bits per frame 


br = 120 x 10? x 270.8333333 х 10? = 32,500 bits per frame 


_ {4 _ 10612 » " 
п= |1 10612) х 100 67.35% 


0.6735 x 270.8333333 
22.8 


The last calculation, with an answer of 8 channels, confirms that our calcu- 
lation of efficiency is correct. 


Number of channels/frame = = 8 


6.4 Wideband Systems 


In wideband systems, the entire system bandwidth is made available to each user, 
and is many times larger than the bandwidth required to transmit information. 
Such systems are known as spread spectrum (SS) systems. There are two funda- 
mental types of spread spectrum systems: (1) direct sequence spread spectrum 
(DSSS) and (2) frequency hopping spread spectrum (FHSS) [3,26]. 

In a DSSS system, the bandwidth of the baseband information carrying sig- 
nals from a different user is spread by different codes with a bandwidth much 
larger than that of the baseband signals (see Chapter 11 for details). The spread- 
ing codes used for different users are orthogonal or nearly orthogonal to each 
other. In the DSSS, the spectrum of the transmitted signal is much wider than the 
spectrum associated with the information rate. At the receiver, the same code is 
used for despreading to recover the baseband signal from the target user while 
suppressing the transmissions from all other users (see Figure 6.5). 

One of the advantages of the DSSS system is that the transmission bandwidth 
exceeds the coherence bandwidth (see Chapter 3). The received signal, after despread- 
ing (see Chapter 11 for details), resolves into multiple signals with different time 
delays. A Rake receiver (see Chapter 11) can be used to recover the multiple time 
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Figure 6.5 Direct sequence spread spectrum. 


delayed signals and combine them into one signal to provide a time diversity with a 
lower frequency of deep fades. Thus, the DSSS system provides an inherent robustness 
against mobile-channel degradations. Another potential benefit of a DSSS system is 
the greater resistance to interference effects in a frequency reuse situation. Also, there 
may be no hard limit on the number of mobile users who can simultaneously gain 
access. The capacity of a DSSS system depends upon the desired value of ЕЛ instead 
of resources (frequencies or time slots) as in FDMA or TDMA systems. 

Frequency hopping (FH) is the periodic changing of the frequency or the 
frequency set associated with transmission (see Figure 6.6). If the modulation is 
M-ary frequency-shift-keying (MFSK) (see Chapter 9 for details), two or more 
frequencies are in the set that change at each hop. For other modulations, a single 
center or carrier frequency is changed at each hop. 

An FH signal may be considered a sequence of modulated pulses with pseudo- 
random carrier frequencies. The set of possible carrier frequencies is called the hop 
set. Hopping occurs over a frequency band that includes a number of frequency 
channels. The bandwidth of a frequency channel is called the instantaneous band- 
width (Bj). The bandwidth of the frequency band over which the hopping occurs 
is called the total hopping bandwidth (By). The time duration between hops is 
called the hop duration or hopping period (Ty). 
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Frequency 


Figure 6.6 Frequency hopping spread spectrum system. 


Frequency hopping can be classified as fast or slow. Fast frequency bopping 
occurs if there is frequency hop for each transmitted symbol. Thus, fast frequency 
hopping implies that the hopping rate equals or exceeds the information symbol 
rate. Slow frequency hopping occurs if two or more symbols are transmitted in the 
time interval between frequency hops. 

Frequency hopping allows communicators to hop out of frequency channels 
with interference or to hop out of fades. To exploit this capability, error-correcting 
codes, appropriate interleaving, and disjoint frequency channels are nearly always 
used. A frequency synthesizer is required for frequency hopping systems to con- 
vert a stable reference frequency into the various frequency of hop set. 

Frequency hopping communicators do not often operate in isolation. Instead, 
they are usually elements of a network of frequency hopping systems that create 
mutual multiple-access interference. This network is called a frequency-hopping 
multiple-access (FHMA) network. 

If the hoppers of an FHMA network all use the same M frequency channels, but 
coordinate their frequency transitions and their hopping sequence, then the multiple- 
access interference for a lightly loaded system can be greatly reduced compared to a 
non-hopped system. For the number of hopped signals (Mp) less than the number of 
channels (N,), a coordinated hopping pattern can eliminate interference. As the num- 
ber of hopped signals increases beyond N,, then the interference will increase in pro- 
portion to the ratio of the number of signals to the number of channels. In the absence 
of fading or multipath interference, since there is no interference suppression system 
in frequency hopping, for a high channel loading the performance of a frequency hop- 
ping system is no better than a non-hopped system. Frequency hopping systems are 
best for light channel loadings in the presence of conventional non-hopped systems. 
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When fading or multipath interference is present, the frequency hopping system has 
better error performance than a non-hopped system. If the transmitter hops to a chan- 
nel in a fade, the errors are limited in duration since the system will shortly hop to a 
new frequency where the fade may not be as deep. 

Network coordination for frequency hopping systems are simpler to imple- 
ment than that for DSSS systems because the timing alignments must be within 
a fraction of a hop duration, rather than a fraction of a sequence chip (narrow 
pulse). In general, frequency hopping systems reject interference by trying to avoid 
it, whereas DSSS systems reject interference by spreading it. The interleaving and 
error-correcting codes that are effective with frequency hopping systems are also 
effective with DSSS systems. 

The major problems with frequency hopping systems with increasing hop- 
ping rates are the cost of the frequency synthesizer increases and its reliability 
decreases, and synchronization becomes more difficult. 

In theory, a wideband system can be overlaid on existing, fully loaded, nar- 
rowband channelized systems (as an example, the IS-95 CDMA system overlays 
on existing AMPS [FDMA]). Thus, it may be possible to create a wideband net- 
work right on top of the narrowband cellular system using the same spectrum. 


6.5 Comparisons of FDMA, TDMA, and DS-CDMA 

The DSSS approach is the basis to implementation of the direct sequence code 
division multiple access (DS-CDMA) technique introduced by Qualcom. The DS- 
CDMA has been used in commercial applications of mobile communications. 
The primary advantage of DS-CDMA is its ability to tolerate a fair amount of 
interfering signals compared to FDMA and TDMA that typically cannot toler- 
ate any such interference(Figure 6.7). As a result of the interference tolerance of 
CDMA, the problems of frequency band assignment and adjacent cell interference 
are greatly simplified. Also, flexibility in system design and deployment are signifi- 
cantly improved since interference to others is not a problem. On the other hand, 
FDMA and TDMA radios must be carefully assigned a frequency or time slot to 
assure that there is no interference with other similar radios. Therefore, sophis- 
ticated filtering and guard band protection is needed with FDMA and TDMA 
technologies. With DS-CDMA, adjacent microcells share the same frequencies 
whereas with FDMA/TDMA it is not feasible for adjacent microcells to share the 
same frequencies because of interference. In both FDMA and TDMA systems, a 
time-consuming frequency planning task is required whenever a network changes, 
whereas no such frequency planning is needed for a CDMA network since each 
cell uses the same frequencies. 

Capacity improvements with DS-CDMA also result from voice activity pat- 
terns during two-way conversations, (i.e., times when a party is not talking) that 
cannot be cost-effectively exploited in FDMA or TDMA systems. DS-CDMA 
radios can, therefore, accommodate more mobile users than FDMA/TDMA radios 
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Figure 6.7 Comparison of multiple access methods. 


on the same bandwidth. Further capacity gains for FOMA, TDMA, and СОМА 
can also result from antenna technology advancement by using directional anten- 
nas that allow the microcell area to be divided into sectors. Table 6.1 provides a 
summary of access technologies used for various wireless systems. 


Table 6.1 Access technologies for wireless system. 


System 


North American 
IS-54 (Dual Mode) 


North American 
IS-95 (Dual Mode) 


North American 
IS-136 


GSM (used all over 
world) 


European CT-2 
Cordless 


DECT Cordless 


Access technology 


TDMA/FDD 
FDMA/FDD 


DS-CDMA/FDD 
FDMA/FDD 
TDMA/FDD 
TDMA/FDD 


FDMA/TDD 


TDMA/TDD 


Mode of 
operation 


Digital/ 
Analog FM 


Digital/ 
Analog FM 
Digital 
Digital 


Digital 


Digital 


Frame rate (kbps) 


48.6 


1228.8 
48.6 
270.833 


72.0 


1152.0 
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6.6 Capacity of a DS-CDMA System 
The capacity of a DS-CDMA system depends on the processing gain, G; (a ratio of 
spreading bandwidth, Bw, and information rate, К), the bit energy-to-interference 
ratio, Ej/Io, the voice duty cycle, v; the DS-CDMA omnidirectional frequency 
reuse efficiency, nj, and the number of sectors, С, in the cell-site antenna. 

The received signal power at the cell from a mobile is $ = R X Ер. The 
signal-to-interference ratio is 


S_ R „Eb 
S= А.х (6.12) 


where: 
Ep = energy per bit 
Io = interference density 


In a cell with N, mobile transmitters, the number of effective interferers is 
N, — 1 because each mobile is an interferer to all other mobiles. This is valid 
regardless of how the mobiles are distributed within the cell since automatic 
power control (APC) is used in the mobiles. The APC operates such that the 
received power at the cell from each mobile is the same as for every other mobile 
in the cell, regardless of the distance from the center of the cell. APC conserves 
battery power in the mobiles, minimizes interference to other users, and helps 
overcome fading. 

In a hexagonal cell structure, because of interference from each tier, the S/I ratio 
is given as (see Chapter 5): 


S 1 
I (N,—-1)X[1*6XRki - 12 X k - 18 X ka +... ] (6.13) 
where: 
М, = number of mobile users in the band, В, 
ki, і = 1,2,3,... = the interference contribution from all terminals in 


individual cells in tiers 1, 2, 3, etc., relative to the interference from the center 
cell. This loss contribution is a function of both the path loss to the center cell 
and the power reduction because of power control to an interfering mobile's own 
cell center. 


If we define a frequency reuse efficiency, nf, as in Equation 6.14a, then 
Е,/То is given by Equation 6.15. 


1 (6.14а) 
1 + 6X ki +12 X k + 18 X ka +. . |] 


Nf = 
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Se (6.14b) 


= n 
h к x iN, =) (6.15) 


This equation does not include the effect of background thermal and 
spurious noise (i.e., p) in the spreading bandwidth B,,. Including this as an addi- 
tive degradation term in the denominator results in a bit energy-to-interference 
ratio of: 


n 
x 6.16 
ә К (№, = 1) + p/S l ) 


Note that from Equation 6.16 the capacity of the DS-CDMA system is 
reduced by p/S which is the ratio of background thermal plus spurious noise to 
power level. 

For a fixed Gp = В,„/К, one way to increase the capacity of the DS-CDMA 
system is to reduce the required Ej/Io, which depends upon the modulation and 
coding scheme. By using a powerful coding scheme, the Ej/Io ratio can be reduced, 
but this increases system complexity. Also, it is not possible to reduce the Ej/Io, 
ratio indefinitely. The only other way to increase the system capacity is to reduce 
the interference. Two approaches are used: one is based on the natural behavior 
of human speech and the other is based on the application of the sectorized anten- 
nas. From experimental studies it has been found that typically in a full duplex 
2-way voice conversation, the duty cycle of each voice is, on the average, less 
than 40%. Thus, for the remaining period of time the interference induced by the 
speaker can be eliminated. Since the channel is shared among all the users, noise 
induced in the desired channel is reduced due to the silent interval of other inter- 
fering channels. It is not cost-effective to exploit the voice activity in the FDMA or 
TDMA system because of the time delay associated with reassigning the channel 
resource during the speech pauses. If we define vy as the voice activity factor (<1), 
then Equation 6.16 can be written as: 


(6.17a) 


(N,- 1) +5= [| x [Ве] З (6.17) 
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The equation to determine the capacity of a DS-CDMA system should 
also include additional parameters to reflect the bandwidth efficiency factor, the 
capacity degradation factor due to imperfect power control, and the number of 
sectors in the cell-site antenna. Equation 6.17b is augmented by these additional 
factors to provide the following equation for DS-CDMA capacity at one cell: 


N, = CAN y Bw +1 -р (6.18а) 
Uf R X (Ep/Io) S 


Equation 6.18a can be rewritten as Equation 6.18b by neglecting the last 
two terms. 


N, = Wea x __В„ (6.18b) 
Uf R X (ЕЛ0) 
where: 
nf = frequency reuse efficiency <1 
vp = bandwidth efficiency factor <1 
Cd = capacity degradation factor to account for imperfect APC <1 
vf = voice activity factor <1 
B, = one-way bandwidth of the system 
К = information bit rate plus overhead 
Ep = energy per bit of the desired signal 
Ep/Io = desired energy-to-interference ratio (dependent on quality of service) 
X = efficiency of sector-antenna in cell (< G, number of sectors in the 


cell-site antenna) 


For digital voice transmission, Ej/Io is the required value for a bit error rate 
(BER) of about 1073 or better, and ту depends on the quality of the diversity. 
Under the most optimistic assumption, ту «0.5. The voice activity factor, оу is 
usually assumed to be less than or equal to 0.6. Еь/10 for a BER of 107° can be as 
high as 63 (18 dB) if no coding is used and as low as 5 (7 dB) for a system using 
a powerful coding scheme. The capacity degradation factor, c4 will depend on the 
implementation but will always be less than 1. 


Example 6.6 


Calculate the capacity and spectral efficiency of the DS-CDMA system with an 
omnidirectional cell using the following data: 


* bandwidth efficiency ть = 0.9 
* frequency reuse efficiency ту = 0.45 
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e capacity degradation factor cj = 0.8 

e voice activity factor vy = 0.4 

e information bit rate R = 16.2 kbps 

* ЕЛ = 7dB 

e one-way system bandwidth B,, = 12.5 MHz 


Neglect other sources of interference. 


Solution 
Ep/Io = 5.02 (7 dB) 


N, = 0.45 X 0.9 х 0.8 X 1 x __12.5 x 10° 
0.4 16.2 x 10? x 5.02 


№, = 124.5 (say 125) 


The spectral efficiency, т = exes = 0.162 bits/sec/Hz 


In these calculations, an omnidirectional antenna is assumed. If a three sector 


antenna (i.e., G = 3) is used at a cell site with \ = 2.6, the capacity will be increased 
to 325 mobile users per cell, and spectral efficiency will be 0.421 bits/sec/Hz. 


6.7 Comparison of DS-CDMA vs. TDMA System Capacity 
Using Equations 6.7 and 6.18b with v; — 1 (no voice activity) for TDMA and 
dX = 1.0 (omnidirectional cell) for DS-CDMA the ratio of the cell capacity for the 
DS-CDMA and TDMA systems is given as: 


N N R 
CDMA _ ANN 1 y 1 y, ATDMA (6.19) 
NTDMA Ep/Io Vama M RcpMA 


Example 6.7 


Using the data given in Examples 6.4 and 6.6, compare the capacity of the DS-CDMA 
and TDMA omnidirectional cell. 


Solution 


NcbMA _ 0.8 x 19 X 0.45 х 1 x 1 у 16.2 = 1 703 
NTDMA 5.02 04 2 162 
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6.8 Frequency Hopping Spread Spectrum with M-ary 
Frequency Shift Keying 

The FHSS system uses M-ary frequency shift keying modulation (MFSK) and 
involves the hopping of the carrier frequency in a random manner. It uses MFSK, 
in which b = log2M information bits determine which one of M frequencies is to 
be used [19]. The portion of the M-ary signal set is shifted pseudo-randomly by 
the frequency synthesizer over a hopping bandwidth, Bss. A typical block diagram 
is shown in Figure 6.8. 

In a conventional MFSK system, the data symbol is modulated on a 
carrier whose frequency is pseudo-randomly determined. The frequency synthe- 
sizer produces a transmission tone based on simultaneous dictates of the pseudo- 
noise (PN) code (see Chapter 11) and the data. At each frequency hop time a 
PN generator feeds the frequency synthesizer a frequency word (a sequence of 
L chips), which dictates one of 2L symbol-set positions. The FH bandwidth, 
Bss, and the minimum frequency spacing between consecutive hop positions, Af, 
dictate the minimum number of chips required in the frequency word. 


Example 6.8 

A hopping bandwidth, Bss, of 600 MHz and a frequency step size, Af, of 400 Hz 
are used. What is the minimum number of PN chips that are required for each 
frequency word? 


Solution 
Number of tones contained in B,, = 


Bss 600 x 106 6 
= = 1.5 x 10 
Af 400 


Minimum number of chips required — | 10р2(1.5 x 10°) | = 20chips 


4— Transmitter ————»<— Channel —><«—————— Receiver —————->. 


MFSK FH FH MFSK 
Modulator Modulator Demodulator Demodulator 
PN PN 
Generator Generator 


Figure 6.8 Frequency hopping using MFSK. 
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6.9 Orthogonal Frequency Division Multiplexing (OFDM) 

In this section we briefly introduce OFDM. For more details readers should refer 
to [19]. OFDM uses three transmission principles, multirate, multisymbol, and 
multicarrier. OFDM is similar to frequency division multiplexing (FDM). OFDM 
distributes the data over a large number of carriers that are spaced apart at pre- 
cise frequencies. The spacing provides the orthogonality in this technique, which 
prevents the demodulator from seeing frequencies other than their own. 

Multiple Input, Multiple Output-OFDM (MIMO-OFDM) uses multiple 
antennas to transmit and receive radio signals. MIMO-OFDM allows service 
providers to deploy a broadband wireless access system that has non-line-of-sight 
(NLOS) functionality. MIMO-OFDM takes advantage of the multipath proper- 
ties of the environment using base station antennas that do not have LOS. The 
MIMO-OFDM system uses multiple antennas to simultaneously transmit data 
in small pieces to the receiver, which can process the data flow and put it back 
together. This process, called spatial multiplexing, proportionally boosts the data 
transmission speed by a factor equal to the number of transmitting antennas. In 
addition, since all data is transmitted both in the same frequency band and with 
separate spatial signatures, this technique utilizes spectrum efficiently. VOFDM 
(vector OFDM) uses the concept of MIMO technology. 

We consider a data stream operating at R bps and an available bandwidth of 
МАҒ centered at f,, The entire bandwidth could be used to transmit a data stream, 
in which case the bit duration would be 1/R. By splitting the data stream into N 
substreams using a serial-to-parallel converter, each substream has a data rate of 
R/N and is transmitted on a separate subcarrier, with spacing between adjacent 
subcarriers of Af (see Figure 6.9). The bit duration is N/R. The advantage of 
OFDM is that on a multiple channel the multipath is reduced relative to the sym- 
bol interval by a ratio of 1/N and thus imposes less distortion in each modulated 
symbol. OFDM overcomes inter-symbol interference (ISI) in a multipath environ- 
ment. ISI has a greater impact at higher data rates because the distance between 
bits or symbols is smaller. With OFDM, the data rate is reduced by a factor of N, 
which increases the symbol duration by a factor of N. Thus, if the symbol dura- 
tion is T; for the source stream, the duration of OFDM signals is NT;. This sig- 
nificantly reduces the effect of ISI. As a design criterion, N is selected so that NT; 
is significantly greater than 7,4, (rms delay spread) of the channel. With the use of 
OFDM, it may not be necessary to deploy an equalizer. OFDM is an ideal solu- 
tion for broadband communications, because increasing the data rate is simply a 
matter of increasing the number of subcarriers. To avoid overlap between consec- 
utive symbols, a time guard is enforced between the transmissions of two OFDM 
pulses that will reduce the effective data rate. Also, some subcarriers are devoted 
to synchronization of signal, and some are reserved for redundancy. 
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Figure 6.9 Orthogonal frequency division multiplexing (OFDM). 


The most important feature of OFDM is the orthogonal relationship between 
the subcarrier signals. Orthogonality allows the OFDM subcarriers to overlap 
each other without interference. OFDM uses FH to create a spread spectrum 
system. FH has several advantages over DSSS, for example, no near-far problem, 
easier synchronization, less complex receivers, and so on. 

In the OFDM the input information sequence is first converted into parallel 
data sequences and each serial/parallel converter output is multiplied with 
spreading code. Data from all subcarriers is modulated in baseband by inverse 
fast Fourier transform (IFFT) and converted back into serial data. The guard 
interval is inserted between symbols to avoid ISI caused by multipath fading 
and finally the signal is transmitted after RF up-conversion. At the receiver, after 
down-conversion, the m-subcarrier component corresponding to the received data 
is first coherently detected with FFT and then multiplied with gain to combine the 
energy of the received signal scattered in the frequency domain (see Figure 6.10). 

Wireless Local Area Networks (WLAN) development is ongoing for wireless 
point-to-point and point-to-multipoint configurations using OFDM technology. 
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Figure 6.10 IEEE 802.11 a Transmit and Receive OFDM. 


In a supplement to the IEEE 802.11 standard, the IEEE 802.11 working group 
published IEEE 802.112, which outlines the use of OFDM in the 5.8 GHz band. 
The basic principal of operation is to divide a high-speed binary signal to 
be transmitted into a number of lower data rate subcarriers. There are 48 data 
subcarriers and 4 pilot subcarriers for a total of 52 subcarriers. Each lower data 
rate bit stream is used to modulate a separate subcarrier from one of the chan- 
nels in the 5 GHz band. Prior to transmission the data is encoded using con- 
volutional code (see Chapter 8) of rate, R = 1/2 and bit interleaved for the 
desired data rate. Each bit is then mapped into a complex number according 
to the modulation type and subdivided in 48 data subcarriers and 4 pilot sub- 
carriers. The subcarriers are combined using an IFFT and transmitted. At the 
receiver, the carrier is converted back to a multicarrier lower data rate form using 
FFT. The lower data subcarriers are combined to form a high rate data unit. 
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Future wireless systems such as a fourth-generation (4G) system will need flex- 
ibility to provide subscribers with a variety of services such as voice, data, images, 
and video. Because these services have widely differing data rates and traffic pro- 
files, future generation systems will have to accommodate a wide variety of data 
rates. DS-CDMA has proven very successful for large-scale cellular voice systems, 
but there are concerns whether DS-CDMA will be well-suited to non-voice traf- 
fic. The DS-CDMA system suffers inter-symbol interference (ISI) and multi-user 
interference (MUI) caused by multipath propagation, leading to a high loss of 
performance. 

With OFDM, the time dispersive channel is seen in the frequency domain as 
a set of parallel independent flat subchannels and can be equalized at a low com- 
plexity. There are potential benefits to combining OFDM and DS-CDMA. Basically 
the frequency-selective channel is first equalized in the frequency domain using the 
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OFDM modulation technique. DS-CDMA is applied on top of the equalized 
channel, keeping the orthogonality properties of spreading codes. The combination 
of OFDM and DS-CDMA is used in MC-DS-CDMA. MC-DS-CDMA [4,5,12,25] 
marries the best of the OFDM and DS-CDMA world and, consequently, it can 
ensure good performance in severe multipath conditions. MC-DS-CDMA can 
achieve very large average throughput. To further enhance the spectral efficiency 
of the system, some form of adaptive modulation can be used. 

Basically, three main designs exist in the literature, namely, MC-CDMA, 
MC-DS-CDMA, and multitone (MT)-CDMA. In MC-CDMA, the spreading code 
is applied across a number of orthogonal subcarriers in the frequency domain. 
In MC-DS-CDMA, the data stream is first divided into a number of substreams. 
Each substream is spread in time through a spreading code and then transmitted 
over one of a set of orthogonal subcarriers. In MT-CDMA the system undergoes 
similar operations as MC-DS-CDMA except that the different subcarriers are not 
orthogonal after spreading. This allows higher spectral efficiencies and longer 
spreading codes; however, different substreams interfere with one other. The MC- 
DS-CDMA transmitter spreads the original data stream over different orthogonal 
subcarriers using a given spreading code in the frequency domain. 


6.11 Random Access Methods 


So far we have discussed the reservation-based schemes, now we focus on 
random-access schemes [8]. When each user has a steady flow of information to 
transmit (for example, a data file transfer or a facsimile transmission), reservation- 
based access methods are useful as they make an efficient use of communication 
resources. However, when the information to be transmitted is bursty in nature, 
the reservation-based access methods result in wasting communication resources. 
Furthermore, in a cellular system where subscribers are charged based on a chan- 
nel connection time, the reservation-based access methods may be too expensive 
to transmit short messages. Random-access protocols provide flexible and efficient 
methods for managing a channel access to transmit short messages. The random- 
access methods give freedom for each user to gain access to the network whenever 
the user has information to send. Because of this freedom, these schemes result 
in contention among users accessing the network. Contention may cause colli- 
sions and may require retransmission of the information. The commonly used 
random-access protocols are pure ALOHA, slotted-ALOHA, and CSMA/CD. In 
the following section we briefly describe details of each of these protocols and 
provide the necessary throughput expressions. 


6.11.1 Pure ALOHA 
In the pure ALOHA [18,23] scheme, each user transmits information whenever 
the user has information to send. A user sends information in packets. After 
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sending a packet, the user waits a length of time equal to the round-trip delay for 
an acknowledgment (ACK) of the packet from the receiver. If no ACK is received, 
the packet is assumed to be lost in a collision and it is retransmitted with a ran- 
domly selected delay to avoid repeated collisions.* The normalized throughput $ 
(average new packet arrival rate divided by the maximum packet throughput) of 
the pure ALOHA protocol is given as: 


S = Ge 26 (6.20) 


where С = normalized offered traffic load 


From Equation 6.20 it should be noted that the maximum throughput occurs 
at traffic load С = 50% and is S = 1/2e. This is about 0.184. Thus, the best channel 
utilization with the pure ALOHA protocol is only 18.4%. 


6.11.2 Slotted ALOHA 

In the slotted-ALOHA [23] system, the transmission time is divided into time 
slots. Each time slot is made exactly equal to packet transmission time. Users 
are synchronized to the time slots, so that whenever a user has a packet to send, 
the packet is held and transmitted in the next time slot. With the synchronized 
time slots scheme, the interval of a possible collision for any packet is reduced to 
one packet time from two packet times, as in the pure ALOHA scheme. The nor- 
malized throughput S for the slotted-ALOHA protocol is given as: 


S=Ge@ (6.21) 


where G = normalized offered traffic load 


The maximum throughput for the slotted ALOHA occurs at G = 1.0 (Equa- 
tion 6.21) and it is equal to 1/e or about 0.368. This implies that at the maximum 
throughput, 36.8% of the time slots carry successfully transmitted packets. The 
best channel utilization with the slotted ALOHA protocol is 36.8% —twice the 
pure ALOHA protocol. 


*It should be noted that the protocol on CDMA access channels as implemented in TIA IS-95-A is based 
upon the pure ALOHA approach. The mobile station randomizes its attempt for sending a message on 
the access channel and may retry if an acknowledgment is not received from the base station. For further 
details, one should reference Section 6.6.3.1.1.1 of TIA IS-95-A. 
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6.11.3 Carrier Sense Multiple Access (CSMA) 

The carrier sense multiple access (CSMA) [8,18] protocols have been widely used 
in both wired and wireless LANs. These protocols provide enhancements over the 
pure and slotted ALOHA protocols. The enhancements are achieved through the 
use of the additional capability at each user station to sense the transmissions of 
other user stations. The carrier sense information is used to minimize the length 
of collision intervals. For carrier sensing to be effective, propagation delays must 
be less than packet transmission times. Two general classes of CSMA protocols 
are nonpersistent and p-persistent. 


* Nonpersistent CSMA: A user station does not sense the channel continu- 
ously while it is busy. Instead, after sensing the busy condition, it waits for 
a randomly selected interval of time before sensing again. The algorithm 
works as follows: if the channel is found to be idle, the packet is transmitted; 
or if the channel is sensed busy, the user station backs off to reschedule the 
packet to a later time. After backing off, the channel is sensed again, and the 
algorithm is repeated again. 


* p-persistent CSMA: The slot length is typically selected to be the maximum 
propagation delay. When a station has information to transmit, it senses 
the channel. If the channel is found to be idle, it transmits with probability 
p. With probability q = 1 — p, the user station postpones its action to the 
next slot, where it senses the channel again. If that slot is idle, the station 
transmits with probability p or postpones again with probability q. The 
procedure is repeated until either the frame has been transmitted or the 
channel is found to be busy. If the station initially senses the channel to be 
busy, it simply waits one slot and applies the above procedure. 


1-persistent CSMA: 1-persistent CSMA is the simplest form of the p-persistent 
CSMA. It signifies the transmission strategy, which is to transmit with prob- 
ability 1 as soon as the channel becomes idle. After sending the packet, the user 
station waits for an ACK, and if it is not received within a specified amount of 
time, the user station waits for a random amount of time, and then resumes 
listening to the channel. When the channel is again found to be idle, the packet 
is retransmitted immediately. 


For more details, the reader should refer to [18]. 
The throughput expressions for the CSMA protocols are: 


e Unslotted nonpersistent CSMA 


_ Ge 46 
: G(1 + 2a) + e “© oA 
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e Slotted nonpersistent CSMA 


G[1 + G + aG(1 + С + (aG)2)]e € * 22 


С(1 + 2a) — (1 — e^*€) + (1 + aG)e с +a) 


e Slotted 1-persistent CSMA 


Ge € + а] + a — e499] 
(1 + a)1—e 4*9) + ae 60 +a) 


$ = 


where: 
S = normalized throughput 
G = normalized offered traffic load 
а = t/Ty 
т = maximum propagation delay 
Tp = packet transmission time 
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(6.23) 


(6.24) 


(6.25) 


We consider a WLAN installation in which the maximum propagation delay is 
0.4sec. The WLAN operates at a data rate of 10 Mbps, and packets have 400 bits. 
Calculate the normalized throughput with: (1) an unslotted nonpersistent, (2) a 


slotted persistent, and (3) a slotted 1-persistent CSMA protocol. 


Solution 


40 х 1076 х 10 х 106 _ 
С = 1 
400 
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* Slotted nonpersistent: 


0.01 X 1 X e901 
S= = 0.4 
1—e 99! + 0.01 ОРЫ 


• Unslotted nonpersistent: 


= 1x e 0901 = 
У (1 + 0.02) + e 901 d 


* Slotted 1-persistent: 


e 101 + 0.01 — e7901) 


(1 + 0.01) — e 991) + 0.012101 — 0.531 


S 


6.11.4 Carrier Sense Multiple Access with Collision Detection 

A considerable performance improvement in the basic CSMA protocols can 
be achieved by means of the carrier sense multiple access witb collision detection 
(CSMA/CD) technique. The CSMA/CD protocols are essentially the same as those 
for CSMA with addition of the collision-detection feature. Similar to CSMA pro- 
tocols, there are nonpersistent, 1-persistent, and p-persistent CSMA/CD protocols. 
More details about CSMA/CD protocols can be found in [27]. 

When a CSMA/CD station senses that a collision has occurred, it imme- 
diately stops transmitting its packets and sends a brief jamming signal to notify 
all stations of this collision. Collisions are detected by monitoring the analog 
waveform directly from the channel. When signals from two or more stations are 
present simultaneously, the composite waveform is distorted from that of a single 
station. This is manifested in the form of larger than normal voltage amplitude on 
the cable. In the Ethernet the collision is recognized by the transmitting station, 
which goes into a retransmission phase based on an exponential random backoff 
algorithm. 

The normalized throughput for unslotted nonpersistent and slotted nonper- 
sistent CSMA/CD is given as: 


Unslotted nonpersistent CSMA/CD 


Ge 46 
$ = 6.26 
Се-4© + bG(1 — e749") + 2aG(1 — e^46) + (2 — e749) l ) 


where b = jamming signal length 
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Slotted nonpersistent CSMA/CD 


S= абе © (6.27) 


aGe ^6 + b(1 — e^*^€6 — aGe ©) + a(2 — e “© — aGe ©) 


While these collision detection mechanisms are a good idea on a wired 
local area network (LAN), they cannot be used on a wireless local area network 
(WLAN) environment for two main reasons: 


* Implementing a collision detection mechanism would require the implemen- 
tation of a full duplex radio capable of transmitting and receiving at the 
same time—an approach that would increase the cost significantly. 


* [n a wireless environment we cannot assume that all stations hear each 
other (which is the basic assumption of the collision detection scheme), and 
the fact that a station wants to transmit and senses the medium as free does 
not necessarily mean that the medium is free around the receiver area. 


6.11.5 Carrier Sense Multiple Access with Collision Avoidance 
(CSMA/CA) 

IEEE 802.11 uses a protocol known as carrier sense multiple access witb collision 

avoidance (CSMA/CA) or distributed coordination function (DCF). CSMA/CA 

attempts to avoid collisions by using explicit packet acknowledgment (ACK), 

which means an ACK packet is sent by the receiving station to confirm that the 

data packet arrived intact. 

The CSMA/CA protocol works as follows. A station wishing to transmit 
senses the medium, if the medium is busy (i.e., some other station is transmitting) 
then the station defers its transmission to a later time. If no activity is detected, the 
station waits an additional, randomly selected period of time and then transmits if 
the medium is still free. If the packet is received intact, the receiving station issues 
an ACK frame that, once successfully received by the sender, completes the pro- 
cess. If the ACK frame is not detected by the sending station, either because the 
original data packet was not received intact or the ACK was not received intact, 
a collision is assumed to have occurred and the data packet is transmitted again 
after waiting another random amount of time. The CSMA/CA provides a way to 
share access over the medium. This explicit ACK mechanism also handles inter- 
ference and other radio-related problems very effectively. However, it does add 
some overhead to 802.11 that 802.3 does not have, so that an 802.11 WLAN will 
always have slower performance than the equivalent Ethernet LAN (802.3). 

The CSMA/CA protocol is very effective when the medium is not heav- 
ily loaded since it allows stations to transmit with minimum delay. But there 
is always a chance of stations simultaneously sensing the medium as being free 
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and transmitting at the same time, causing a collision. These collisions must be 
identified, so that the media access control (MAC) layer can retransmit the packet 
by itself and not by the upper layers, which would cause significant delay. In 
particular, the hidden node and exposed node problems should be addressed by 
MAC. Both of them give rise to many performance problems including through- 
put degradtion, unfair throughput distribution, and throughput instability (see 
Chapter 18 for details). 

The IEEE 802.11 uses a collision avoidance (CA) mechanism together with a 
positive ACK. The MAC layer of a station wishing to transmit senses the medium. 
If the medium is free for a specified time (called distributed inter-frame space 
(DIFS)), then the station is able to transmit the packet; if the medium is busy (or 
becomes busy during the DIFS interval) the station defers using the exponential 
backoff algorithm. 

This scheme implies that, except in cases of very high network congestion, 
no packets will be lost, because retransmission occurs each time a packet is not 
acknowledged. This entails that all packets sent will reach their destination in 
sequence. 

The IEEE 802.11 MAC layer provides cyclic redundancy check (CRC) 
checksum and packet fragmentation. Each packet has a CRC checksum calcu- 
lated and attached to ensure that the data was not corrupted in transmit. Packet 
fragmentation is used to segment large packets into smaller units when sent over 
the medium. This is useful in very congested environments or when interference 
is a factor, since large packets have a better chance of being corrupted. This tech- 
nique reduces the need for retransmission in many cases and improves overall 
wireless network performance. The MAC layer is responsible for reassembling 
fragments received, rendering the process transparent to higher-level protocols. 
The following are some of the reasons it is preferable to use smaller packets in a 
WLAN environment. 


* Due to higher BER of a radio link, the probability of a packet getting cor- 
rupted increases with packet size. 

* In case of packet corruption (either due to collision or interference), the 
smaller the packet, the less overhead it needs to retransmit. 


A simple stop-and-wait algorithm is used at the MAC sublayer. In this mech- 
anism the transmitting station is not allowed to transmit a new fragment until one 
of the following happens: 


* Receives an ACK for the fragment, or 


* Decides that the fragment was retransmitted too many times and drops the 
whole frame. 
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Exponential backoff scheme is used to resolve contention problems among 
different stations wishing to transmit data at the same time. When a station goes 
into the backoff state, it waits an additional, randomly selected number of time 
slots known as a contention window (in 802.11b a slot has a 20 us duration and 
the random number must be greater than 0 and smaller than a maximum value 
referred to as a contention window (CW)). During the wait, the station continues 
sensing the medium to check whether it remains free or if another transmission 
begins. At the end of its window, if the medium is still free the station can send its 
frame. If during the window another station begins transmitting data, the backoff 
counter is frozen and counting down starts again as the channel returns to the 
idle state. 

There is a problem related to the CW dimension. With a small CW, if many 
stations attempt to transmit data at the same time it is possible that some of them 
may have the same backoff interval. This means that there will continuously be 
collisions, with serious effects on network performance. On the other hand, with 
a large CW, if a few stations wish to transmit data they will likely have long back- 
off delays resulting in degradation of network performance. The solution is to 
use an exponentially growing CW size. It starts from a small value (CWmin = 31) 
and doubles after each collision, until it reaches the maximum value С\Й нах 
(CWmax = 1023). In 802.11 the backoff algorithm is executed in three cases: 


1. When the station senses the medium busy before the first transmission of a 
packet 
2. Before each retransmission 
3. After a successful transmission 
This is necessary to avoid a single host wanting to transmit a large quantity 


of data and occupying the channel for too long, denying access to all other 
stations. The backoff mechanism is not used when the station decides to transmit 
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Figure 6.11 CSMA/CA in IEEE 802.11b. 
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a new packet after an idle period and the medium has been free for more than a 
distributed inter-frame space (DIFS) (see Figure 6.11). 

To support time-bounded services, the IEEE 802.11 standard defines the 
point coordinate function (PCF) to let stations have priority access to the wire- 
less medium, coordinated by a station called point coordinate (PC). The PCF has 
higher priority than DIFS, because it may start transmissions after a shorter dura- 
tion than DIFS; this time space is called PCF inter frame space (PIFS), which is 
25 us for IEEE 802.11 and larger than SIFS. 


The transmission time for a data frame — [PLCP + P | us 
where: 
PLCP = the time required to transmit the physical layer convergence protocol 


(PLCP) 
D = the frame size 
R = the channel bit rate 


CSMA/CA packet transmission time = BO + DIFS + 2PLCP + n + SIFS +4 ps 


where: 
A = the ACK frame size 
BO - the backoff time 
DIFS = the distributed inter-frame space 
SIFS = the short inter-frame space 
PIFS = the point coordinate interframe space 


6.12 Idle Signal Casting Multiple Access 

In the CSMA scheme, each terminal must be able to detect the transmissions of 
all other terminals. However, not all packets transmitted from different terminals 
can be sensed, or terminals may be hidden from each other by buildings or some 
other obstacles. This is known as the hidden terminal problem, which severely 
degrades the throughput of the CSMA. The idle signal casting multiple access 
(ISMA) system transmits an idle/busy signal from the base station to indicate the 
presence or absence of another terminal’s transmission. The ISMA and CSMA are 
basically the same. In the CSMA, each terminal must listen to all other terminals, 
whereas in the ISMA, each terminal is informed from the base station of the other 
terminals’ transmission. Similar to CSMAs, there are nonpersistent ISMAs and 
1-persistent ISMAs. 


6.13 Packet Reservation Multiple Access 


Packet reservation multiple access (PRMA) allows a variety of information sources 
to share the same communication channel and obtains a statistical multiplexing 
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effect. In PRMA, time is divided into frames, each of which consists of a fixed 
number of time slots. For voice terminals, voice activity detection is adopted. The 
voice signal comprises a sequence of talk spurts. At the beginning of a talk spurt, 
the terminal transmits the first packet based on slotted ALOHA. Once the packet 
is transmitted successfully, that terminal is allowed to use the same time slots in 
the succeeding frames (reservation is made). The reservation is kept until the end 
of the talk spurt. The status *reserved" or *unreserved" of each slot is broadcast 
from the base station. 


6.14 Error Control Schemes for Link Layer 

Error control schemes for the link layer are used to improve the performance 
of mobile communication systems [8]. Several automatic repeat request (ARQ) 
schemes are used. At the physical layer of wireless mobile communication sys- 
tems, error detection and correction techniques such as forward error correction 
(FEC) schemes are used. For some of the data services, higher layer protocols use 
ARQ schemes to enable retransmission of any data frames in which an error is 
detected. The ARQ schemes are classified as follows [23]: 


* Stop and Wait: The sender transmits the first packet numbered 0 after 
storing a copy of that packet. The sender then waits for an ACK numbered 
0, (ACKO) of that packet. If the ACKO does not arrive before a time-out, the 
sender transmits another copy of the first packet. If the ACKO arrives before 
a time-out, the sender discards the copy of the first packet and is ready to 
transmit the next packet, which it numbers 1. The sender repeats the previ- 
ous steps, with numbers 0 and 1 interchanged. The advantages of the Stop 
and Wait protocol are its simplicity and its small buffer requirements. The 
sender needs to keep only the copy of the packet that it last transmitted, 
and the receiver does not need to buffer packets at the data link layer. The 
main disadvantage of the Stop and Wait protocol is that it does not use the 
communication link very efficiently. 


The total time taken to transmit a packet and to prepare for transmitting the 
next one is 


Т = Tp + 2Tprop + 2Tproc + Ta (6.28) 
where: 
T = total time for transmission time 
Tp = transmission time for a packet 


Tprop = propagation time of a packet or an ACK 
Tproc = processing time for a packet or an ACK 
Т, = transmission time for ап ACK 
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If p is the probability that a packet or its ACK is corrupted by transmission 
errors, and a successful transmission of a packet and its ACK takes T seconds 
and occurs with probability 1 — p, the protocol efficiency for full duplex (FD) is 
given as: 


(1 — p)Tp 
(1 — p)T + pT, 


NED = (6.30) 


Selective Repeat Protocol (SRP): In case of the SRP, only the selected pack- 
ets are retransmitted. The data link layer in the receiver delivers exactly one 
copy of every packet in the correct order. The data link layer in the receiver 
may get the packets in the wrong order from the physical layer. This occurs, 
for example, when transmission errors corrupt the first packet and not the 
second one. The second packet arrives correctly at the receiver before the 
first. The data link layer in the receiver uses a buffer to store the packets that 
arrive out of order. Once the data link layer in the receiver has a consecutive 
group of packets in its buffer, it can deliver them to the network layer. The 
sender also uses a buffer to store copies of the unacknowledged packets. 
The number of the packets which can be held in the sender/receiver buffer 
is a design parameter. 


Let W = the number of packets which the sender and receiver buffers can 
each hold and SRP = number of packets in modulo 2W. The protocol efficiency 
without any error and with a packet error probability of p is given as: 


WT, 
a] (6.31) 


т|(0) = min T 


For very large W, the protocol efficiency is 
n(p)—-1-p (6.32) 


where: 
WT, = time-out 


2+p(W-1 
(р) = ER | 


С 2+ p8W — 1) (aa 
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SRP is very efficient, but it requires buffering packets at both the sender and 


the receiver. 


* Go-Back-N (GBN): The Go-Back-N protocol allows the sender to have mul- 


tiple unacknowledged packets without the receiver having to store packets. 
This is done by not allowing the receiver to accept packets that are out of 
order. When a time-out timer expires for a packet, the transmitter resends 
that packet and all subsequent packets. The Go-Back-N protocol improves 
on the efficiency of the Stop and Wait protocol, but is less efficient than SRP. 
The protocol efficiency for full duplex is given as: 


тер = — (6.34) 
1+ eid 

* Window-control Operation Based on Reception Memory (WORM) ARQ: 
In digital cellular systems, bursty errors occur by multipath fading, 
shadowing, and handoffs. The typical bit-error rate fluctuates from 107! 
to 1076, Therefore, the conventional ARQ schemes do not operate well in 
a digital cellular system. WORM ARQ has been suggested for control of 
dynamic error characteristics. It is a hybrid scheme that combines SRP GBN 
protocol. GBN protocol is chosen in the severe error condition whereas SRP 
is selected in the normal error condition. 


* Variable Window and Frame Size GBN and SRP [24]: Since wireless systems 
have bursty error characteristics, the error control schemes should have a 
dynamic adaptation to a bursty channel environment. The SRP and GBN 
with variable window and frame size have been proposed to improve error 
control in wireless systems. Table 6.2 provides the window and frame size 
for different BER. If the error rate increases, the window and frame size 
are decreased. In the case of the error rate being small, the window and 
frame size are increased. The optimum threshold values of BER, window 
and frame size were obtained through computer simulation. 


Table 6.2 Bit-error rate versus window and size. 


Bit-error rate (BER) 


Window size (W) 


Frame size (bits) 


BER = 1074 32 172 
10-4 < BER < 10-3 8 80 
107? < BER < 1072 4 40 
1072 < BER 2 16 
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Example 6.10 

We consider a WLAN in which the maximum propagation delay is 4 sec. The 
WLAN operates at a data rate of 10 Mbps. The data and ACK packets are of 
400 and 20 bits, respectively. The processing time for a data or ACK packet is 
1 sec. If the probability p that a data packet or its ACK can be corrupted during 
transmission is 0.01, find the data link protocol efficiency with (1) Stop and Wait 
protocol— full duplex, (2) SRP with window size W = 8, and (3) Go-Back-N 
protocol with window size W = 8. 


Solution 


T=40+2X4+2X1+2=52ps 


Stop and Wait: 


(1 — 0.01) x 40 


"= 712001) x52+0.01x40 079? 
SRP: 
= 2+001(8-1) _ 
зарае 
СВА: 
= 1 Spry = 03925 
1+ 8 Sob] 


6.15 Summary 
The chapter described the access technologies used in wireless communications 
including reservation-based multiple access and random multiple access. FDMA, 
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TDMA, and CDMA technologies were discussed and their advantages and 
disadvantages were listed. Illustrated examples were given to show calculations for 
determining the capacity of TDMA and CDMA systems. Brief descriptions of the 
FDD, TDD, TDM/TDMA, and TDM/TDMA/FDD approaches were also given. 
Since packet networks are an important part of wireless networks, we briefly 
stated the characteristics of the access methods in common use and defined their 
throughput equations. The common packet protocols such as ALOHA, slotted 
ALOHA, and Carrier Sense Multiple Access (CSMA) were discussed. We also 
presented the methods used to control errors for data link protocols. 


Problems 

6.1 In a proposed TDMA cellular system, the one-way bandwidth of the system 
is 40 MHz. The channel spacing is 30 kHz and total voice channels in the 
system are 1333. The frame duration is 40ms divided equally between 
six time slots. The system has an individual user data rate of 16.2 kbps in 
which the speech with error protection has a rate of 13 kbps. Calculate the 
efficiency of the TDMA system. What is the efficiency of the system with 
20, 60, 80 and 100MHz? 


6.2 Recompute the capacity of the GSM system in Example 5.1 when a 
sectorized system is used. With sectorization, there are 12 channel sets of 
39 channels each with three sets assigned at each cell, one for each sector. 


6.3 In the IS-54 (TDMA/FDD), the frame duration is 40ms. The frame con- 
tains six time slots. The transmit bit rate is 48.6 kbps. Each time slot carries 
260 bits of user information. The total number of 30 kHz voice channels 
available is 395 and the total system bandwidth is 12.5 MHz. Calculate the 
access efficiency of the system. 


6.4 Calculate the capacity and spectral efficiency (т) of the IS-54 system using 
the following parameters: ть = 0.96, р = 2 (i.e., 7/4-DQPSK), voice 
activity factor vy = 1.0, information bit rate = 19.5 kbps, frequency reuse 
factor = 7 and system bandwidth = 12.5 MHz. 


6.5 Calculate the cell capacity and spectral efficiency of a GSM system using the 
following data: (1) bandwidth efficiency factor — 1, (2) bit efficiency (with 
GMSK modulation) = 1, (3) voice activity factor = 1, (4) one-way bandwidth 
of the system = 10MHZ, (4) information bit rate per frame = 270.83 kbps, 
(5) number of users per frame — 8, and (6) frequency reuse factor — 4. 


6.6 Consider a CDMA system that uses QPSK modulation and convolutional 
coding. The system has a bandwidth of 1.25 MHz and transmits data at 
9.6 kbps. Find the number of users that can be supported by the system 
and bandwidth efficiency. Assume a three-sector antenna system with an 
effective gain of 2.6, power control efficiency = 90%, and frequency reuse 
efficiency of 66.67%. A bit-error rate of 1073 is required. 
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6.7 A QPSK/DSSS WLAN is designed to transmit in the 902- to 928-MHz 
ISM band. The symbol transmission rate is 0.25 Megasymbols per second. 
An orthogonal code with eight symbols is used. A bit-error rate of 107° 
is required. How many users can be supported by the WLAN? A three- 
sector antenna with gain — 2.6 is used. Assume frequency reuse efficiency 
of 66.67% and power control efficiency of 9096. What is the bandwidth 
efficiency? 


6.8 A WLAN accommodates 50 stations running the same application. The 
transmission rate per station is 2 Mbps and the stations use slotted ALOHA 
protocol. The total traffic produced by the stations is assumed to form a 
Poisson process. What is the maximum throughput in Erlangs? What is 
the maximum throughput in Mbps? What is the maximum throughput in 
Mbps for each station? 

6.9 Consider a WLAN installation in which maximum propagation delay is 
0.5 us. The WLAN operates at a data rate of 12 Mbps, and each packet 
is 600 bits. Calculate the throughput with (1) an unslotted nonpersistent, 
(2) a slotted persistent, and (3) a slotted 1-persistent CSMA protocol. 


6.10 Consider a WLAN in which the maximum propagation delay is 5 ws. The 


WLAN operates at a data rate of 12 Mbps. The data and ACK packet are 
600 and 24 bits, respectively. The processing time for data or ACK packet 
is 2 us. If the probability р that a data packet or its ACK can be corrupted 
during transmission is 196, find the data link protocol efficiency with 
(1) Stop-and-Wait protocol, full duplex, (2) SRP with window size W — 12, 
and (3) Go-Back-N protocol with window size W — 12. 
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CHAPTER 7 


Architecture of a Wireless 
Wide-Area Network (WWAN) 


7.1 Introduction 

A wireless network does not operate in isolation; it uses the services of public 
switched telephone networks (PSTNs) to make or receive calls from wireline 
users. A number of functions is required to support the services and facilities in 
a wireless wide-area network (WWAN). The basic subsystems of the WWAN 
are: radio station subsystem (RSS), networking and switching subsystem (NSS), 
and operational and maintenance subsystem (OMSS) (see Figure 7.1). The 
radio subsystem is responsible for providing and managing transmission paths 
between the user equipment and the NSS. This includes management of the 
radio interface between the user equipment and the rest of the WWAN system. 
The NSS has the responsibility of managing communications and connecting 
user equipment to the relevant networks or other users. The NSS is not in direct 


Service 
Provider 


RSS: Radio Station Subsystem 
NSS: Network and Switching Subsystem 


OMSS: Operational and Maintenance Subsystem 
UE: User Equipment 


Figure 7.1 Model of a WWAN system. 
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contact with the user equipment, nor is the radio subsystem in direct contact 
with external networks. The user equipment, radio subsystem, and NSS form 
the operational part of the WWAN system. The OMSS provides the means for 
a service provider to control them. Figure 7.1 shows the model for the WWAN 
system. In the WWAN, interaction between the subsystems can be grouped into 
two main parts [3]: 


* Operational part: External Networks = NSS = RSS © UE © User 
* Control and maintenace part: OMSS © Service Provider 


The operational part provides transmission paths and establishes them. 
The control and maintenance parts interact with the traffic-handling activity 
of the operational part by monitoring and modifying it to maintain or improve 
functions. 

In this chapter, we present the architecture of a WWAN and discuss subsys- 
tem entities and their roles. We also look into the frame and channel structure 
and point out the role of different logical channels used in the GSM. We then 
describe how information is processed in the GSM. We conclude the chapter with 
a brief description of services available in the GSM900. More detailed discussion 
of WWANs will be given in Chapter 15. 


7.2 WWAN Subsystem Entities 


Figure 7.2 shows the functional entities of a WWAN and their logical interaction. 
A brief description of these functional entities is provided below [1,10,11]. 


7.2.1 User Equipment 

The user equipment (UE) consists of the physical equipment used by the sub- 
scriber to access a WWAN for offered telecommunication services. Functionally, 
the UE includes a mobile terminal and, depending on the services it can support, 
various terminal equipment and combinations of terminal equipment and termi- 
nal adaptor (TA) functions (TA acts as a gateway between the terminal equipment 
and mobile terminal) (see Figure 7.3). Various types of mobile stations, such as 
a vehicle-mounted station, portable station, or handheld station, are used [7]. 
Basically, a mobile station can be divided into two parts. The first part contains 
the hardware and software to support radio and man-machine interface functions 
and is available at retail stores to buy or rent. The second part contains terminal/ 
user-specific data in the form of a smart card (subscriber identity module (SIM) 
card), which can effectively be considered a sort of logical terminal. The SIM 
card plugs into the first part of the mobile station and remains in it for the dura- 
tion of use. Without the SIM card, the mobile station is not associated with any 
user and cannot make or receive calls (except possibly an emergency call if the 
network allows). The SIM card is issued by the mobile service provider after 
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Other 
Network 


A, B, C, ... ,G Interfaces 
Abis: Interface between BTS and BSC MSC: Mobile Switching Center 


AuC: Authentication Center OMC: Operations and Maintenance Center 
BSC: Base Station Controller RSS: Radio Station Subsystem 

BTS: Base Transceiver Station UE: User Equipment (MS) 

EIR: Equipment Identity Register VLR: Visitor Location Register 


HLR: Home Location Register 


— Signaling links 
— Data + Signaling links 


Figure 7.2 WWAN reference model. 
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Figure 7.3 Functional model of a mobile station. 
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subscription. This type of SIM-card mobility is analogous to terminal mobility, 
but it also provides a personal-mobility-like service within the WWAN. 

A mobile station has a number of identities, including the international mobile 
subscriber identity (IMSI), the temporary mobile subscriber identity (TMSI), the 
international mobile equipment identity (IMET), and integrated services of digital 
network (ISDN) number. The IMSI is embodied in the SIM. SIM contains all 
subscriber-related information stored on the user's side of the radio interface. 


• International Mobile Subscriber Identity: The IMSI is assigned to a mobile 
station at subscription time. It uniquely identifies a given mobile station. 
IMSI is transmitted over the radio interface only if necessary. IMSI contains 
15 digits and has: 


1. Mobile Country Code (MCC)—3 digits (home country) 

2. Mobile Network Code (MNC)— 2 digits (home network) 

3. Mobile Subscriber Identification Number (MSIN) 

4. National Mobile Subscriber Identity Number (NMSI) 

Temporary Mobile Subscriber Identity: The TMSI is assigned to a mobile 
station by the visitor location register (VLR). The TMSI uniquely identi- 


fies a mobile station within the area controlled by a given visitor location 
register. A maximum of 32 bits can be used for TMSI. 
* International Mobile Equipment Identity: The IMEI uniquely identifies the 


mobile station equipment. It is assigned by the equipment manufacturer. 
The IMEI contains 15 digits and carries: 


1. Type of Approval Code— 6 digits 
2. Final Assembly Code— 2 digits 
3. Serial Number— 6 digits 

4. Spare— 1 digit 


The Subscriber Identity Module (SIM) contains: IMSI, authentication key (К), 
subscriber information, access control class, cipher key (Ke), TMSI, information 
about additional services, location area identity (LAT) and forbidden networks list. 


7.2.2 Radio Station Subsystem 

The radio station subsystem (RSS) is the physical equipment that provides radio 
coverage to prescribed geographical areas, known as cells. It contains equipment 
required to communicate with the user equipment. Functionally, an RSS con- 
sists of a control function performed by the base station controller (BSC) and a 
transmitting/receiving function carried out by the base station transceiver (BTS) 
system. The BTS is the radio transmission/receiving equipment and covers a cell. 
An RSS can serve several cells and can have multiple base station transceivers. 
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The base station transceiver contains the transcoder rate adapter unit 
(TRAU). In the GSM TRAU, the speech encoding and decoding is carried out, 
as well as the rate adaptation function for data. In certain situations TRAU is 
located between the base station controller (BSC) and the mobile switching center 
(MSC) to gain an advantage of a more-compressed transmission between the BTS 
and the TRAU. Interface between the BTS and BSC is Apis. The interface between 
the user equipment and radio station subsystem is air interface (Um). 


7.2.8 Network and Switching Subsystem 

The NSS includes the main switching functions of the WWAN, databases 
required for the subscribers, and mobility management. Its main role is to 
manage the communications between the WWAN and other network users [8]. 
Within the NSS, the switching functions are performed by the mobile switch- 
ing center (MSC). Subscriber information relevant to provisioning of service 
is kept in the home location register (HLR). The other database in the NSS is 
the visitor location register (VLR), which maintains data required for mobility 
management. 

The MSC performs the necessary switching functions required for the user 
equipment located in an associated geographical area, called an MSC area. The 
MSC monitors the mobility of its subscribers and manages necessary resources 
required to handle and update the location registration procedures and to carry 
out the handoff functions. The MSC is involved in the interworking functions to 
communicate with other networks such as PSTN and ISDN. The interworking 
functions of the MSC depend upon the type of the network to which it is con- 
nected and the type of service to be performed. The call routing, call control, and 
echo control functions are also performed by the MSC. 

The HLR is the functional unit used for management of mobile subscribers. 
The number of home location registers in a network varies with the characteristics 
of the network. Two types of information are stored in the HLR: subscriber infor- 
mation and part of the mobile information to allow incoming calls to be routed 
to the MSC for the particular mobile. Any administrative action (such as changes 
in service profile, etc.) by a service provider on subscriber data is carried out in 
the HLR. The HLR stores IMSI, MS ISDN number, VLR address, and subscriber 
data (e.g., supplementary services, etc.). 

The VLR is linked to one or more MSCs. The VLR is a functional unit 
that stores subscriber information, such as location area, when the subscriber 
is located in the area covered by the VLR. When a roaming user enters an MSC 
area, the MSC informs the associated VLR about the UE; the UE goes through a 
registration procedure that includes the following steps: 


* The VLR recognizes that the UE is from another network. 
* [f roaming is allowed, the VLR finds the UE's HLR in its home network. 
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* The VLR constructs a global title from the IMSI to allow signaling from the 
VLR to the UE's HLR via the PSTN/ISDN networks. 


* The VLR generates a mobile subscriber roaming number (MSRN) that is 
used to route incoming calls to the UE. 


• The MSRN is sent to the UE s HLR. 
The information included in the VLR is: 


1. MSRN 
TMSI 
. LAI where the UE has been registered 
. data related to supplementary services 
MS ISDN number 
IMSI 
HLR address or global title (GT) 
. local UE identity, if used 

The NSS contains more than MSCs, HLRs, and VLRs. In order to set up a 
call, the call is first routed to a gateway switch, referred to as the gateway MSC 
(GMSC). The GMSC is responsible for collecting the location information and 
routing the call to the MSC through which the subscriber can obtain service at 
that instant (i.e., the visited MSC). The GMSC first finds the right HLR from the 
directory number of the subscriber and interrogates it to obtain user information. 
The GMSC has an interface with external networks for which it provides a gate- 
way function. It also has an interface with the signaling system 7 (S$7) network 
for interworking with other NSS entities. 


9» M Q9 t^ Boo 


7.2.4 Operation and Maintenance Subsystem (OMSS) 

The OMSS is responsible for handling system security based on the validation of 
identities of various telecommunications entities. These functions are performed 
in the authentication center (AuC) and equipment identity register (EIR). The 
AuC is accessed by the HLR to determine whether a UE will be granted service. 
The EIR provides UE information used by the MSC. The EIR maintains a list of 
legitimate, fraudulent, or faulty UEs. 

The OMSS is also in charge of remote operation and maintenance of the 
network. Functions are monitored and controlled in the OMSS. The OMSS may 
have one or more network management centers (NMCs) to centralize network 
control. 

The operations and maintenance center (OMC) is the functional entity 
through which a service provider monitors and controls the system. The OMC 
provides a single point for maintenance personnel to maintain the entire system. 
One OMC can serve multiple MSCs. 
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7.2.5 Interworking and Interfaces 

Necessary interfaces are required to achieve an optimum interworking between 
different entities of the network. The use of the SS7 between the MSC and VLR 
and between the MSC and HLR allows transmission of both call control signals 
and other information. The corresponding signaling capabilities are supported by 
the mobile application part (MAP) in SS7 defined in the particular network stan- 
dards. The interface labels on the reference model (Figure 7.2— A, Apis, B, C, D, 
E, E, G, and Um) corresponds to interfaces between network nodes. Each interface 
is specified in network standards along with their corresponding procedures. For 
example the GSM recommendations in the 09 series cover interworking proce- 
dures between a public land mobile network (PLMN) and other networks [9]. 


7.3 Logical Channels 

A WWAN uses a variety of channels in which the information is carried. In GSM, 
these channels are separated into physical channels and logical channels [10,11]. 
The physical channels are determined by the time slots, whereas the logical chan- 
nels are determined by the information carried within the physical channels. It 
can be further summarized by saying that several recurring time slots on a carrier 
constitute a physical channel. These are then used by different logical channels to 
transfer information. These channels may either be used for user data (payload) 
or signaling to enable the system to operate. 

In GSM logical channels (see Figure 7.4) are used to carry traffic and control 
information. There are three types of logical channels: traffic channels (TCHs), 
control channels (CCHs), and the cell broadcast channel (CBCH). The traffic chan- 
nels are used to transmit user information (speech or data). The control channels 
are used to transmit control and signaling information. The cell broadcast channel 
is used to broadcast user information from a service center to the mobile stations 
listening to a given cell area. It is a unidirectional (downlink-only, base station to 
mobile station), point-to-multipoint channel used for a short-information message 
service. Some special constraints are imposed on the design of the CBCH because 
of the requirement that this channel can be listened in parallel with the broadcast 
control channel (BCCH) information and the paging messages. 

The control channels consist of broadcast channel (BCH), common con- 
trol channel (CCCH), and dedicated control channel (DCCH). The broadcast 
channels are used for such functions as correcting mobile frequencies, frame syn- 
chronization, control channel structure, and so on. They are point-to-multipoint, 
downlink-only channels. These channels consist of BCCH, frequency correction 
channel (FCCH), and synchronization channel (SCH). 

The BCCH is used to send cell identities, organization information about 
common control channels, cell service available, and so on. The frequency correction 
channel is used to transmit frequency correction data bursts that contain the set of 
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BCH CCCH DCCH 


SDCCH 


ACCH: Associated Control Channel 

AGCH: Access Grant Channel 

BCH: Broadcast Channel 

BCCH: Broadcast Control Channel 

CBCH: Cell Broadcast Channel 

CCH: Control Channel 

CCCH: Common Control Channel 

DCCH: Dedicated Control Channel 

FACCH: Fast Associated Control Channel associated with full rate (F) or half rate (H) traffic channel 
FCCH: Frequency Correction Channel 

PCH: Paging Channel 

RACH: Random Access Channel 

SACCH: Slow Associated Control Channel associated with full rate (TF) or half rate (TH) traffic channel 
SCH: Synchronization Channel 

SDCCH: Stand-alone Dedicated Control Channel 

TCH: Traffic Channel 

TCH/F: Traffic Channel/Full 

TCH/H: Traffic Channel/Half 


Figure 7.4 GSM logical channel. 
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all “0.” This gives a constant frequency shift of the RF carrier that can be used by 
the mobile station for frequency correction. The synchronization channel (SCH) 
is used for time synchronization of the mobile stations. The data on this channel 
include frame number as well as the base station identity code (BSIC) required by 
mobile stations when measuring base station signal strength. 

The CCCHs include paging channel (PCH), access grant channel (AGCH) 
and random access channel (RACH). The CCCHs are point-to-multipoint 
downlink-only channels that are used for paging and access. The PCHs are used 
to page mobile stations. The mobile stations need to listen for paging during 
certain times. The AGCHs are downlink-only channels used to assign mobiles 
to stand-alone dedicated control channels (SDCCHs) for initial assignment. The 
RACHs are uplink-only channels used by mobile stations for transmitting their 
requests for dedicated connections to the network. 

There are two types of DCCHs: SDCCH and associated control chan- 
nel (ACCH). The SDCCHs are bidirectional, point-to-point channels that are 
used for service request, subscriber authentication, ciphering initiation, equip- 
ment validation, and assignment to a traffic channel (TCH). The ACCHs are 
bidirectional, point-to-point channels that are associated with a given TCH and 
SDCCH. These channels are used to send out-of-band signaling and control data 
between the mobile station and the base station. Examples of their use are to send 
signal strength measurements from a mobile station to the base station or to send 
transmission timing information from the base station to the mobile station. The 
associated control channels are further divided as slow associated control chan- 
nels (SACCHs) and fast associated control channels (FACCHs). Figure 7.4 shows 
all GSM logical channels. Table 7.1 lists briefly the role of each logical channel. 
For more details, refer to the GSM 04.03, 05.01, and 05.2 series recommenda- 
tions [4,5]. 


7.4 Channel and Frame Structure 

We discuss channel and frame structure with reference to the GSM900 system 
that uses FDMA/TDMA (see Chapter 6) and a bandwidth of 25 MHz. The fre- 
quency band used for uplink (i.e., from the mobile station to the base station) 
is 890 to 915 MHz, whereas for the downlink (i.e., from the base station to the 
mobile station) is 935 to 960 MHz. The GSM900 has 124 RF channels, each with 
a bandwidth of 200kHz. For a given RF channel the uplink (ОТ) and downlink 
(РІ) frequency can be obtained from Equations 7.1 and 7.2, respectively: 


UL; = 890.2 + 0.20(N — 1) MHz (7.1) 


DL; = 935.2 + 0.20(N — 1) MHz (7.2) 
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Table 7.1 Role of logical channels in GSM. 


Logical channel Role of the logical channel 

TCH/F Full rate traffic channel to carry payload at 22.8 kbps 

TCH/H Half rate traffic channel to carry payload at 11.4 kbps 

BCCH Broadcast network information 

SCH Synchronization of the mobile stations 

FCCH Used for frequency correction 

AGCH Acknowledges channel request from mobile and allocates an SDCCH 

FACCH For time critical signaling over TCH (e.g., for handoff signaling); traffic 
burst is stolen for a full signaling burst 

SACCH TCH in-band signaling, e.g., for link monitoring 

SDCCH For signaling exchange, e.g., during call setup, registration/location 
updates 

FACCHs FACCH for SDCCH. The SDCCH burst is stolen for a full signaling burst. 

SACCHs SDCCH in-band signaling, e.g., for link monitoring 

where: 


N = 1, 2,..., 124 


When the mobile station is assigned a channel, an RF channel and a time 
slot are also assigned. RF channels are assigned in frequency pairs—one for the 
uplink and the other for the downlink. Each pair of RF channels supports up to 
eight simultaneous voice calls (see Figure 7.5). Thus, the GSM can support up 
to 992 simultaneous users with a full-rate speech coder. This number is doubled 
to 1984 users with the half-rate speech coder. 

In GSM, the RF carriers are divided in time using a TDMA scheme. The 
fundamental unit of time is called a burst (time slot) period and it lasts for 0.577 ms. 
Eight of these burst periods are grouped into a TDMA frame. The frame lasts for 
4.615 ms and it forms the basic unit for the definition of logical channels. One 
physical channel is one burst period allocated in each TDMA frame. There are 
different types of frames that are transmitted to carry different data. The frames 
are organized into multiframes, superframes, and hyperframes to provide overall 
synchronization. 

The GSM multiframe is 120 ms. It contains 26 frames of 8 bursts. The struc- 
ture of a GSM hyperframe, superframe, multiframe, frame, and burst is given in 
Figure 7.6. A burst carries 156.25 bits. The same format is used for the uplink 
and downlink transmission with various burst types as shown in Figure 7.7. In 
a normal burst, two user information groups of 58 bits account for most of the 
transmission time in a time slot (57 bits carry user data, while the Н bit is used 
to distinguish speech from other transmissions). Twenty-six training (T) bits are 
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Figure 7.5 GSM FDMA/TDMA structure. 


used in the middle of the time slot. The time slot starts and ends with three tail 
bits. The time slot also contains 8.25 guard (G) bits. 


7.5 Basic Signal Characteristics 

The GSM system operates using frequency division duplex (FDD) and as a result, 
paired frequency bands are required for the up- and downlink transmissions. 
The frequency separation is dependent upon the band in use (for GSM900, it 
is 45 MHz). The RF carrier is modulated using Gaussian minimum shift keying 
(GMSK) (see Chapter 9 for details). The GMSK occupies a relatively narrow 
bandwidth, and it has a constant power level. 

The data transported by the RF carrier serves up to eight different users 
under the basic system. Even though the full data rate on the carrier is about 
270.83 kbps, some of this supports the management overhead, and therefore 
the data rate allocated to each time slot is only 22.8kbps. In addition to error 
correction, the problem of interference, fading and the like must be overcome. 
This means that the available data rate for transporting the digitally encoded 
speech is 13 kbps for the basic vocoder. 


7.6 Speech Processing 

Two major steps are taken in transmitting and receiving information over a digital 
radio link: information processing and modulation processing. Information pro- 
cessing deals with the preparation of the basic information signals so that they are 
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GSM Hyperframe (3.48 hours) 


G: Guard bits 
T : Training bits 
H : Bit used to distinguish speech from other transmission 


Figure 7.6 Physical structure for GSM hyperframe, superframe, multiframe, frame, 
and time slot. 


protected and converted into a form that the radio link can handle. Information 
processing involves transcoding, channel coding, bit-interleaving, encrypting, and 
multiplexing. Modulation processing involves the physical preparation of the 
signal to carry information on an RF carrier [6]. 

Each digital radio link process in the transmitting path has its peer in the 
receiving path (see Figure 7.8). The delay equalization process in the receiving 
path is required to compensate for the spread in time delays resulting from the 
multipath propagation (see Chapter 3). It can be part of the demodulation process. 
However, it should be emphasized that it is required when delay spreads are sig- 
nificant compared to the information bit duration. In the GSM the transmitted bit 
duration is about 37 usec, and a delay spread of about 6 to 8 usec is quite com- 
mon. The delay spread problem becomes critical and is difficult to solve with the 
higher transmission bit rate. 
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Figure 7.7 GSM different time slot structures. 


In the GSM, the analog speech from the mobile station is passed through a 
low-pass filter to remove the high-frequency contents from the speech. The speech 
is sampled at the rate of 8000 samples per second, uniformly quantized (see 
Chapter 4) to 2? (8192) levels and coded using 13 bits per sample. This results in 
a digital information stream at a rate of 104 kbps. At the base station, the speech 
signal is digital (64 kbps), which is first transcoded from the A-law (see Chapter 4) 
8-bit samples into 13-bit samples corresponding to a linear representation of 
amplitudes. This results in a digital information stream at a rate of 104 kbps. 
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Figure 7.8 Digital radio link process. 


The 104-kbps digital signal stream is fed into the speech encoder (see 
Figure 7.9) which then transcodes the speech into a 13-kbps stream. The full-rate 
speech encoder takes a 2080 bit block from the 13-bit transcoder every 20 ms 
(i.e., 160 samples) and produces 36 “filter parameters” bits over the 20 ms period, 
9 long-term prediction (LTP) bits every 5 ms, and 47 regular pulse excited-linear 
prediction coding (RPE-LPC) bits every 5 ms (refer to Table 7.2). Thus, 260 bits 
are generated every 20ms. Of these 260bits, 182 are classified as class I bits 
related to the excitation signal, whereas the remaining 78 are class II bits related 
to the parameters of linear prediction coding (LPC) and LTP filters. The class I bits 
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Table 7.2 Details of class I and class Il bits in GSM vocoder. 
Bits per 5 ms Bits per 20 ms 
Linear Prediction Coding (LPC) filter 36 
Long Term Prediction (LTP) filter 9 36 
Excitation signal 47 188 
Total 260 
Class | 182 (class la = 50, 
class Ib = 132) 
Class 11 78 


are further divided into class Ia (50 bits) and class Ib (132 bits). The class Ia bits 
are the most significant bits which are used to generate 3 cyclic redundancy check 
(CRC) bits. The 3 CRC bits along with 4 tail bits are added to the 182 class I bits 
before they are passed through the half-rate convolutional codec to produce twice 
as many bits output as there are bits input (i.e., 2 X 189 = 378). The 78 class II 
bits remain uncoded and are bypassed (see Figure 7.10). The total 456 bits (i.e., 
378 + 78) are fed to the bit interleaver. Since 456 bits are generated during 20 ms, 
the user data rate is 456/0.02 = 22.8 kbps. This includes 13kbps raw data and 
9.8 kbps of parity, tail, and channel coding. 

Another vocoder (the enhanced full rate (EFR)) (see Chapter 8) has been 
added in response to the poor voice quality perceived by the users of the RPE-LPC 
vocoder. This new vocoder gives much better voice quality. It uses the algebraic 
code excitation linear prediction (ACELP) compression technology (see Chapter 8) 
to provide a significant improvement in voice quality compared to the original 
RPE-LPC. There is also a half-rate vocoder (11.4 kbps). Although this vocoder 
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Figure 7.10 Channel coding for full-rate speech in GSM. 


gives more inferior voice quality compared to full-rate vocoders, it does allow for 
an increase in network capacity. It is used in some instances when network loading 
is very high to handle all the calls. 

Of the 456 bits, 57 at a time are interleaved with 57 other bits from an 
adjacent data block to form a data burst of 114 bits. At this stage, 42.25 overhead 
bits are added to the data burst to carry it in a time slot (see Figure 7.11). Bit inter- 
leaving is used to reduce the adverse effects of fading by preventing entire blocks 
of bits from being destroyed by a signal fade. Interleaved data is passed through 
the GMSK modulator where it is filtered by a Gaussian filter before applying it to 
the modulator. The modulated data passes through a duplexer switch where filter- 
ing is provided between the transmitted and the received signal. On the receiving 
side the signal is demodulated and deinterleaved before the error correction is 
applied to the recovered bits. 


7.7 Power Levels in Mobile Station 

A variety of power levels are allocated by the GSM standard, the lowest being 
only 800 mW (29dBm). As mobiles may only transmit for one-eighth of the time, 
i.e., for their allocated slot, which is one of eight, the average power level is an 
eighth of the maximum power. 

To reduce the levels of transmitted power additionally and hence the levels 
of interference, mobiles are able to step the power down in increments of 2dB 
from the maximum to a minimum of 20 mW (13 dBm). The mobile station mea- 
sures the signal strength or signal quality (based on bit-error-rate), and passes the 
information to BTS and hence to BSC, which ultimately decides if and when the 
power level should be changed. 

A further power-saving and interference-reducing facility is the discontinuous 
transmission (DTx) capability (an optional feature in GSM) that is incorporated 
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Figure 7.11 Speech coding in GSM (full rate). 


within specifications. It is particularly useful because there are long pauses in 
speech, for example, when the person using the mobile phone is listening, and 
during these periods there is no need to transmit a signal. The most important 
element of DTx is the voice activity detector. It must distinguish between voice 
and noise inputs, a task that is not trivial. 


7.8 GSM Public Land Mobile Network Services 


GSM offers users good voice quality, call privacy, and network security. The SIM 
card provides the security mechanism for GSM. SIM cards are like credit cards 
and identify the user to the GSM network. They can be used with any GSM hand- 
set, providing phone access, ensuring delivery of appropriate services to that user, 
and automatically billing the subscribers's network usage to the home network. 

Roaming agreements have been established between most GSM service 
providers in different countries, allowing subscribers to roam between networks 
and have access to the same services no matter where they travel. 

Of major importance is GSM's potential for delivering enhanced services 
requiring multimedia communication: voice, image, and data. Several mobile service 
providers offer free voice mailboxes and phone answering services to subscribers. 
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The basic telecommunication services provided by the GSM public land mobile 
network (PLMN) are divided into three main groups: bearer services, teleservices, 
and supplementary services [2]. Bearer services give the subscriber the capacity 
required to transmit appropriate signals between certain access points (i.e., user- 
network interfaces). Table 7.3 provides a summary of these services and compares 
them with service available with integrated services of digital network (ISDN). 

Teleservices provide the subscriber with necessary capabilities, including 
terminal equipment functions, to communicate with other subscribers. The GSM 
teleservices are: 


* Speech transmission — telephony, emergency call 


* Short message services— mobile terminating point-to-point, mobile- 
originating point-to-point, cell broadcast 


Message handling and storage services 
Videotex access 


Teletext transmission 


Facsimile transmission 


A summary of the teleservices is given in Table 7.4. A comparison is made 
between the GSM and ISDN teleservices. 

Supplementary services modify or supplement basic telecommunications 
services and are offered with or in association with basic telecommunications 
services. Table 7.5 summarizes the supplementary services and compares them to 
the supplementary services available with ISDN. 

The GSM system was designed as a 2G cellular communications system. One 
of the basic aims was to provide a system that would enable greater capacity to 
be achieved than 1G analog systems. GSM achieved this by using a digital TDMA 
approach. By adopting TDMA more users could be accommodated within the 


Table 7.3 A comparison of bearer services supported by GSM and ISDN. 


Service GSM ISDN 
Data Service yes yes 
Alternate speech/data yes yes 
Speech followed by data yes yes 
Clear 3.1-kHz audio yes yes 
Unrestricted digital information (UDI) yes yes 
Packet Assembler/Disassembler (PAD) yes no 

3.1-kHz external to PLMN yes no 


Others no yes 
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available spectrum. In addition to this, ciphering of digitally encoded speech was 
used to retain privacy. 


Table 7.4 A comparison of teleservices supported by GSM and ISDN. 


Service GSM ISDN 
Circuit switch (telephony) yes yes 
Emergency call yes yes 
Short message point-to-point yes yes 
Short message cell broadcast yes yes 
Alternate speech/facsimile group 3 yes yes 
Automatic facsimile group 3 service yes yes 
Voice-band modem (3.1-kHz audio) yes yes 
Messaging teleservices yes no 
Paging teleservices yes no 
Others no yes 


Table 7.5 A comparison of supplementary services supported by GSM and ISDN. 


Service GSM ISDN 
Call Number ID Presentation yes yes 
Call Number ID Restriction yes yes 
Connected Number ID Presentation yes yes 
Connected Number ID Restriction yes yes 
Malicious Call Identification yes yes 
Call Forwarding Unrestricted yes yes 
Call Forwarding Mobile Busy yes yes 
Call Forwarding No Reply yes yes 
Call Forwarding Mobile Not Reachable yes yes 
Call Transfer yes yes 
Call Waiting yes yes 
Call Hold yes yes 
Completion of Call to Busy Subscriber yes yes 
3-Party Service yes yes 
Conference Calling yes yes 


(continued) 
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Table 7.5 (continued) 


Service GSM ISDN 
Closed User Group yes yes 
Multiparty yes yes 
Advice of Charge yes yes 
Reverse Charging yes yes 
Flexible Altering no yes 
Mobile Access Hunting yes yes 
Freephone yes no 
Barring All Originating Calls yes yes 
Barring Outgoing Calls yes yes 
Barring Outgoing International Calls yes yes 
Barring All International Calls yes yes 
Barring Outgoing International Calls—except yes yes 
Home 

Barring Incoming Calls when Roaming yes yes 
Do Not Disturb Barring yes 
Message Waiting Notification SMS yes 
Preferred Language Service no yes 
Remote Feature Control no yes 
Selective Call Acceptance Barring yes 
Voice Privacy Encryption yes 
Priority Access & Channel Assignment no yes 
Password Call Acceptance no yes 
Subscriber PIN Intercept Barring yes 
Subscriber PIN Access no yes 
Voice Mail Retrieval no yes 
Others no yes 


7.9 Summary 

The use of GSM has grown steadily since it was first deployed in 1991. It is now 
the most widely used mobile phone system in the world. GSM reached the 1 billion 
subscriber point in 2004, and continues to grow in popularity. 

In this chapter, we presented an overview of GSM900 —a typical WWAN— 
and discussed network architecture, logical channels, frame structures, speech 
processing, power control, and services. We will discuss enhancements to the GSM 
in Chapter 15, including general packet radio services (GPRS) and universal mobile 
telecommunication services (UMTS), which are derived from the GSM. 
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Problems 


7.1 What are the three subsystems that are used in the WWAN? 

7.2 Define the role of a VLR in the WWAN architecture. 

7.3 Define the role of an HLR in the WWAN architecture. 

7.4 Why are the IMSI, TMSI, and IMEI used in a WWAN? 

7.5 Define the three services available in the GSM. 

7.6 What is the role of a speech codec in the speech processing of a WWAN? 
7.7 What is a bit-interleaver? Why it is used in a WWAN? 

7.8 Why do you need an equalizer in the GSM? 

7.9 Why are convolution codecs used in wireless networks? 


7.10 Why are so many logical channels used in the GSM? 
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CHAPTER 6 


Speech Coding and 
Channel Coding 


8.1 Introduction 

In Chapter 7 we introduced speech and channel coding with reference to the 
GSM. In this chapter we provide detailed descriptions of speech and channel cod- 
ing schemes. We first discuss speech coding methods and attributes of a speech 
codec. (The speech codec is also called a voice codec or vocoder. It is a hardware 
circuit that converts the spoken word into digital code and vice versa.) These are 
then followed by a brief discussion of linear-prediction-based analysis-by-synthesis 
(LPAS) method. We also discuss the QCELP, EVRC, EFR, and AMR codecs that 
are used in WWAN systems. We then focus on channel coding, concentrating on 
three channel coding schemes—convolutional code, Reed-Solmon (R-S) block 
code, and turbo code. The convolutional codes have been used in direct sequence 
spread spectrum CDMA (15-95) and R-S and turbo code аге the proposed channel 
coding schemes for cdma2000 and WCDMA. 

To achieve reliable communication with minimum possible signal power is 
the main objective of a communications system engineer. Speech coding is used 
to save bandwidth and improve bandwidth efficiency whereas channel coding is 
employed to improve signal quality and reduce bit-error-rate (BER). The idea of 
using a channel coding scheme is to recover from errors that occur during trans- 
mission over the communication channel. The channel coding strategy is aimed at 
allowing the transmitter to use minimum possible signal power in accomplishing 
the design objective of providing a specified error rate. 


8.2 Speech Coding 


The speech quality of codecs operating at a fixed bit rate is largely determined by 
the worst-case speech segments, i.e., those that are the most difficult to code at the 
given rate. Variable rate coding can provide a given level of speech quality at an 
average bit rate that is substantially less than the bit rate that would be required 
by an equivalent quality fixed rate codec [1-4]. 

The original CDMA codec known as Qualcomm code-excited linear predictive 
(QCELP), IS 96A was an 8kbps code-excited linear predictive (CELP) variable rate 
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codec designed for use in the 900 MHz digital cellular band [11,12]. The desire for 
improved voice quality spurred the TIA to begin working on а 13 kbps CELP vari- 
able rate codec to provide higher quality voice transmissions. The 13 kbps СОМА 
codec takes advantage of the higher data rate (14.4 kbps as compared to 9.6 kbps for 
the 8kbps codec) to improve speech quality. It has produced mean opinion scores 
(MOS) close to toll-quality voice, the benchmark used for comparison. Unfortu- 
nately, system capacity and cell coverage are reduced by the higher data rate codec. 


8.2.1 Speech Coding Methods 

Speech coding is the process for reducing the bit rate of digital speech repre- 
sentation for transmission or storage, while maintaining a speech quality that is 
acceptable for the application. Speech coding methods are classified as waveform 
coding, source coding, and hybrid coding. The following sections will explain 
these concepts. 

In Figure 8.1, the bit rate is plotted on a logarithmic axis versus speech 
quality classes of *poor to excellent" corresponding to the five-point MOS scale 
values of 1 to 5, defined by the International Telecommunications Union (ITU). It 
may be noted that for low complexity and low delay, a bit rate of 32 to 64 kbps is 
required. This suggests the use of waveform codecs. However, for low bit rate of 
4 to 8kbps, hybrid codecs should be used (see Figure 8.1). These types of codecs 
tend to be complex with high delay [5—8]. 
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Figure 8.1 Quality of service versus bit rate. 
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8.2.2 Speech Codec Attributes 

Speech quality as produced by a codec is a function of transmission bit rate, 
complexity, delay, and bandwidth. Therefore, when considering speech codecs it 
is essential to consider all of these attributes and their interactions. For example, 
low bit rate codecs tend to have more delay compared to the higher bit rate codecs. 
They are generally more complex to implement and often have lower speech qual- 
ity than the higher bit rate codecs. The following are the speech codec attributes. 


Transmission Bit Rate 

Since the speech codec shares the communications channel with other data, the 
peak bit rate should be as low as possible so as not to use a disproportionate share 
of the channel. The codecs below 64 kbps are primarily developed to increase the 
capacity of circuit multiplication equipment used for narrow bandwidth links. For 
the most part, they are fixed bit rate codecs, meaning they operate at the same rate 
regardless of the input. In the variable bit rate codecs, network loading and voice 
activity determine the instantaneous rate assigned to a particular voice channel. 
Any of the fixed rate speech codecs can be combined with a voice activity detec- 
tor (VAD) and made into a simple two-state variable bit rate system. The lower 
rate could be either zero or some low rate needed to characterize slowly changing 
background noise characteristics. Either way, the bandwidth of the communica- 
tions channel is only used for active speech. 


Delay 
The delay of a speech codec can have a great impact on its suitability for a par- 
ticular application. For a one-way delay of conversation greater than 300 ms, the 
conversation becomes more like a half-duplex or push-to-talk experience, rather 
than an ordinary conversation. The components of total system delay include: 
(1) frame size, look ahead, multiplexing delay, (2) processing delay for computa- 
tions, and (3) transmission delay. 

Most low bit rate speech codecs process a frame of speech data at a time. 
The speech parameters are updated and transmitted for every frame. In addition, 
to analyze the data properly it is sometimes necessary to analyze data beyond the 
frame boundary; hence, before the speech can be analyzed it is necessary to buf- 
fer a frame's worth of data. The resulting delay is referred to as algorithmic delay. 
This delay component cannot be reduced by changing the implementation, but all 
other delay components can. The second major contribution for delay comes from 
the time taken by the encoder to analyze the speech and the decoder to reconstruct 
the speech. This part of the delay is referred to as processing delay. It depends on 
the speed of the hardware used to implement the coder. The sum of the algorithmic 
and processing delays is called the one-way codec delay. The third component of 
delay is due to transmission. It is the time taken for an entire frame of data to be 
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transmitted from the encoder to the decoder. The total of the three delays is the one- 
way system delay. In addition, frame interleaving delay adds an additional frame 
delay to the total transmission delay. Frame interleaving is necessary to combat 
channel fading (discussed in Chapter 3), and is part of the channel coding process. 


Complexity 

Speech codecs are implemented on special purpose hardware, such as digital signal 
processing (DSP) chips. DSP attributes are the computing speed in millions of 
instructions per second (MIPS), random access memory (RAM), and read only 
memory (ROM). For a speech codec, the system designer makes a choice about 
how much of these resources are to be allocated to the speech codec. Speech codecs 
using less than 15 MIPS are considered low-complexity codecs; those requiring 
30 MIPS or more are thought of as high-complexity codecs. More complexity 
results in higher costs and greater power usage; for portable applications, greater 
power usage means reduced time between battery recharges or use of larger bat- 
teries, which means more expense and weight. 


Quality 

Of all the attributes, quality has the most dimensions. In many applications there 
are large amounts of background noise (car noise, street noise, office noise, etc.). 
How well does the codec perform under these adverse conditions? What happens 
when there are channel errors during transmission? Are the errors detected or 
undetected? If undetected, the codec must perform even more robustly than when 
it is informed that entire frames are in error. How good does the codec sound 
when speech is encoded and decoded twice? All these questions must be carefully 
evaluated during the testing phase of a speech codec. The speech quality is often 
based on the five-point MOS scale as defined by the International Telecommuni- 
cation Union-Technical (ITU-T). 


8.2.3 Linear-Prediction-Based Analysis-by-Synthesis (LPAS) 

In a linear predictive codec attempt is made to synthesize certain features of the 
voice message (time waveform). The linear-prediction-based analysis-by-synthesis 
(LPAS) methods provide efficient speech coding at rates between 4 and 16kbps. 
In LPAS speech codecs [10], the speech is divided into frames, each of about 20 ms 
length, for which the coefficients of the linear predictor (LP) are computed. The 
resulting LP filter predicts each sample from a set of previous samples. 

In LPAS codecs, the residual signal is quantized on a subframe-by-subframe 
basis (there are commonly 2 to 8 subframes per frame). The resulting quantized 
signal forms the excitation signal for the LP synthesis filter. For each subframe, 
a criterion is used to select the best excitation signal from a set of trial excitation 
signals. The criterion compares the original speech signal with trial reconstructed 
speech signals. Because of the synthesis implicit in the evaluation criterion, the 
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method is called analysis-by-synthesis coding. Various representations of excitation 
have been used. For lower bit rates, the most efficient representation is achieved 
by using vector quantization. For each subframe, the excitation signal is selected 
from a multitude of vectors, which are stored in a codebook. (The codebook 
consists of a set of stochastic excitation signals, ensembles of zero-mean Gauss- 
ian noise.) The index of the best matching vector is transmitted. At the receiver 
this vector is retrieved from the same codebook. The resulting excitation signal 
is filtered through the LP synthesis filter to produce the reconstructed speech. 
Linear prediction analysis-by-synthesis codecs using a codebook approach are 
commonly known as code-excited linear predictive (CELP) codec. 

The parametric coding is used for those aspects of the speech signal which are 
well understood. Parametric codecs are traditionally used at low bit rates. A proper 
understanding of a speech signal and its perception is essential to obtaining good 
speech quality with a parametric codec. The waveform matching procedure is 
employed for those aspects of speech which are not well understood. Waveform 
matching constraints are relaxed for those aspects which can be replaced by para- 
metric models without degrading the quality of the reconstructed speech. 

A parameter which is well understood in parametric coding is the pitch of the 
speech signal. Satisfactory pitch estimation procedures are available. Piecewise lin- 
ear interpolation of the pitch does not degrade speech quality. Pitch period is typi- 
cally determined once every 20 ms and linearly interpolated between the updates. 
The challenge is to generalize the LPAS method such that its matching accuracy 
becomes independent of the synthetic pitch-period contour used. This is done 
by determining a time wrap of speech signal such that its pitch-period contour 
matches the synthetic pitch-period contour. The time wraps are determined by 
comparing a multitude of time-wrapped original signals with a synthesized signal. 
This coding scheme is called the generalized analysis-by-synthesis method and is 
referred to as Relaxed CELP (RCELP). The generalization relaxes the waveform- 
matching constraints without affecting speech quality. 


8.2.4 Waveform Coding 

In general, waveform codecs are designed to be independent of signal. They map the 
input waveform of the encoder into a facsimile-like replica of it at the output of the 
decoder. Coding efficiency is quite modest. The coding efficiency can be improved 
by exploiting some statistical signal properties, if the codec parameters are opti- 
mized for most likely categories of input signals, while still maintaining good qual- 
ity for other types of signals as well. The waveform codecs are further subdivided 
into time domain waveform codec and frequency domain waveform codec. 


Time Domain Waveform Coding 
The well-known representation of speech signal using time domain waveform cod- 
ing is the A-law (in Europe) or u-law (in North America) companded pulse code 
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modulation (PCM) at 64kbps (see Chapter 4). Both use nonlinear companding 
characteristics to give a near-constant signal-to-noise ratio (SNR) over the total 
input dynamic range. 

The ITU G.721, 32kbps adaptive differential PCM (ADPCM) codec is 
an example of a time domain waveform codec. More flexible counterparts of 
the G.721 are the G.726 and G.727 codecs. The G.726 codec is a variable-rate 
arrangement for bit rates between 16 and 40kbps. This may be advantageous 
in various networking applications to allow speech quality and bit rate to be 
adjusted on the basis of the instantaneous requirement. The G.727 codec uses 
core bits and enhancement bits in its bit stream to allow the network to drop the 
enhancement bits under restricted channel capacity conditions, while benefiting 
from them when the network is lightly loaded. 

In differential codecs a linear combination of the last few samples is used 
to generate an estimate of the current one, which occurs in the adaptive predic- 
tor. The resultant difference signal (i.e., the prediction residual) is computed and 
encoded by the adaptive quantizer with a lower number of bits than the original 
signal, since it has a lower variance than the incoming signal. For a sampling 
rate of 8000 samples per second, an 8-bit PCM sample is represented by a 4-bit 
ADPCM sample to give a transmission rate of 32 kbps. 

Time domain waveform codecs encode the speech signal as a full-band signal 
and map it into as close a replica of the input as possible. The difference between 
various coding schemes is their way of using prediction to reduce the variance 
of the signal to be encoded in order to reduce the number of bits necessary to 
represent the encoded waveform. 


Frequency Domain Waveform Coding 

In the frequency domain waveform codecs the input signal undergoes some short- 
time spectral analysis. The signal is split into a number of frequency-domain sub- 
bands. The individual sub-band signals are then encoded by using different numbers 
of bits to fulfill the quality requirements of that band based on its prominence. The 
various schemes differ in their accuracies of spectral analysis and in the bit alloca- 
tion principle (fixed, adaptive, semi-adaptive). Two well-known representatives of 
this class are sub-band coding (SBC) and adaptive transform coding (ATC). 


8.2.5 Vocoders 

Vocoders are parametric digitizers which use certain properties of the human 
speech production mechanism. Human speech is produced by emitting sound 
pressure waves which are radiated primarily from the lips, although, with some 
sounds, significant energy emanates also from the nostrils, throat, etc. In human 
speech, the air compressed by the lungs excites the vocal cord in two typical 
modes. When generating voice sounds, the vocal cord vibrates and generates 
quasi-periodic voice sounds. In the case of lower energy unvoiced sounds, the 
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vocal cord does not participate in voice production and the source acts like a 
noise generator. The excitation signal is then filtered through the vocal apparatus, 
which behaves like a spectral shaping filter. This can be described adequately by 
an all-pole transfer function that is constituted by the spectral shaping action of 
the vocal tract, lip radian characteristics, etc. 

In the case of vocoders, instead of producing a close replica of an input sig- 
nal at the output, an appropriate set of source parameters is generated to charac- 
terize the input signal sufficiently close for a given period of time. The following 
steps are used in this process: 


1. Speech signal is partitioned in segments of 5 to 20 ms. 


2. Speech segments are subjected to spectral analysis to produce the coefficients 
of the all-zero analysis filter to minimize the prediction residual energy. This 
process is based on the computation of the speech autocorrelation coeffi- 
cients and then using either matrix inversion or iterative scheme. 


3. The corresponding source parameters are specified. The excitation param- 
eters as well as filter coefficients are quantized and transmitted to the 
decoder to synthesize a replica of the original signal by exciting the all-pole 
synthesis filter. 


The quality of this type of scheme is predetermined by the accuracy of the 
source model rather than the accuracy of the quantization of the parameters. 
The speech quality is limited by the fidelity of the source model used. The main 
advantage of vocoders is their low bit rate, with the penalty of relatively low, syn- 
thetic speech quality. Vocoders can be classified into the frequency domain and 
time domain subclasses. However, frequency domain vocoders are generally more 
effective than time domain vocoders. 


8.2.6 Hybrid Coding 
Hybrid coding is an attractive trade-off between waveform coding and vocoder, both 
in terms of speech quality and transmission bit rate, although generally at the price of 
higher complexity. They are also referred to as analysis-by-synthesis (ABS) codecs. 
The most recent international and regional speech coding standards belong 
to a class of LPAS codecs. This class of codecs includes ITU G723.1, G.728 (low- 
delay (LD) CELP, 16 kbps), and G.729 and all the current digital cellular stan- 
dards including: 


* European global system for mobile communications (GSM), full-rate, half- 
rate, enhanced full-rate (EFR), and adaptive multiple rate (AMR) codec 


e North American full-rate, half-rate, and enhanced full-rate for time division 
multiple access (TDMA) IS-136 and code division multiple access (CDMA) 
IS-95 systems 


* Japanese public digital cellular (PDC) full-rate and half-rate 
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In an LPAS coder, the decoded speech is generated by filtering the signal 
produced by the excitation generator through both a long-term (LT) predictor syn- 
thesis filter and a short-term (ST) predictor synthesis filter. The excitation signal is 
found by minimizing the mean-squared error over a block of samples. The error sig- 
nal is the difference between the original and decoded signal. It is weighted by filter- 
ing it through a weighting filter. Both ST and LT predictors are adapted over time. 
Since the analysis procedure (encoder) includes the synthesis procedure (decoder), the 
description of the encoder defines the decoder. The short-term synthesis filter models 
the short-term correlations (spectral envelope) in the speech signal. This is an all-pole 
filter. The predictor coefficients are determined from the speech signal using linear 
prediction (LP) techniques. The coefficients of the short-term predictor are adapted in 
time, with rates varying from 30 to as high as 400 times per second. 

The long-term predictor filter models the long-term correlations (fine spec- 
tral structure) in the speech signal. Its parameters are a delay and gain coeffi- 
cient. For periodic signals, delay corresponds to the pitch period (or possibly an 
integral number of pitch periods). The delay is random for non-periodic signals. 
Typically, the long-term predictor coefficients are adapted at rates varying from 
100 to 200 times per second. 

An alternative structure for the pitch filter is the adaptive codebook. In this 
case, the long-term synthesis filter is replaced by a codebook that contains the 
previous excitation at different delays. The resulting vectors are searched, and the 
one that provides the best result is selected. In addition, an optimal scaling factor 
is determined for the selected vector. This representation simplifies the determina- 
tion of the excitation for delays smaller than the length of excitation frames. 

Code-excited linear predictive (CELP) codecs use another approach to reduce 
the number of bits per sample. Both encoder and decoder store the same collection 
of codes (C) of possible length L in a codebook. The excitation for each frame is 
described completely by the index to an appropriate vector. This index is found 
by an exhaustive search over all possible codebook vectors, using the one that 
gives the smallest error between the original and decoded signals. To simplify the 
search it is common to use a gain-shape codebook in which the gain is searched 
and quantized separately. Further simplifications are obtained by populating the 
codebook vectors with a multipulse structure. By using only a few non-zero unit 
pulses in each codebook vector, efficient search procedures are derived. This parti- 
tioning of excitation space is referred to as an algebraic codebook. The excitation 
method is known as algebraic codebook excited linear prediction (ACELP). 


8.3 Speech Codecs in European Systems 

8.3.1 GSM Enhanced Full-Rate (EFR) 

GSM EFR is the same as a US1 vocoder with 8-PSK modulation and is a 12.2 kbps 
vocoder. It is used in GSM1900. The distribution of bits in a GSM EFR vocoder 
is given in Table 8.1. 
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The IS-136 (TDMA) system uses the vector self-excited linear predictor (VSELP) 
codec. The VSELP algorithm uses a codebook with a predefined structure to reduce 
the number of computations. The output of the VSELP codec for IS-136 is 7.95 kbps. 
It produces a speech frame every 20ms containing 159 bits. Recently, the algebraic 
codebook excited prediction (ACELP) codec (IS-641 vocoder) was selected to replace 
the VSELP codec in IS-136. This codec has an output bit rate of 7.4 kbps. 

Comparisons of MOS and delay for IS-641, ITU LD-CELP and GSM EFR 


are given in Tables 8.2 and 8.3. 


Table 8.1 GSM enhanced full-rate vocoder (12.2 kbps). 


LP Filter Coefficients 
Adaptive Excitation 


Fixed or Algebraic Excitation (4 subframes/ 
frame each with 35 bits) 


Gains (4 subframes/frame each with 9 bits) 


Total 


Table 8.2 Comparison of MOS (5 is the best and 1 is the lowest). 


Condition Original 
Clean Speech 4.34 
15dB Babble 3.75 
20dB Car Noise 3.72 
15 dB Office 3.70 
Noise 

15dB Music 3.99 


Table 8.3 Comparisons of delay (ms). 


Delay Cause IS-641 
Look-ahead 5 
Frame Size 20 
Processing 16 
Bit Stream Buffer 0 
Transmission 26.6 


Total Delay 67.6 


IS-641 


4.09 
3.49 
3.61 
3.40 


3.82 


LD-CELP 


GSME 


4.23 
3.81 
3.64 
3.61 


3.98 


FR 


Bits per 20ms 


38 
30 
4 х 35 = 140 


4х9 = 36 
244 or 12.2kbps 


GSM EFR 


4.26 
3.70 
3.75 
3.58 


3.99 


LD-CELP 


27.1 
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Results show an advantage for ITU LD-CELP and GSM EFR when compared 
to IS-641 for every condition. The disadvantage of the LD-CELP is its higher bit 
rate. This means fewer bits are available for error protection. In weaker channel 
conditions, GSM EFR will have an advantage over LD-CELP due to its lower 
bit rate, fewer sensitive bits to protect, and faster recovery from frame erasures. 
IS-641 also has the same advantages, and on an even weaker channel its perfor- 
mance would surpass that of GSM EFR. 

ITU LD-CELP has a distinct advantage as far as total delay is concerned. 
The advantages of IS-641 over LD-CELP are in complexity and bit rate. LD-CELP 
is a low-delay coder and can produce better clear channel quality than IS-641 for 
a variety of conditions. GSM EFR has clear channel quality performance on a par 
with LD-CELP, has a small delay advantage compared to 15-641, and is a good 
candidate as an upgrade to IS-641 for strong channel conditions. 


8.3.2 Adaptive Multiple Rate Codec 

ETSI adaptive multiple rate (AMR) speech codec design (used for 3G UMTS) 
incorporates multiple codecs for use in full-rate or half-rate mode that are deter- 
mined by channel quality. AMR operates in eight submodes that incorporate bit- 
exact versions of both 12.2kbps US1/GSM EFR and 7.4kbps IS-641 full-rate 
speech coders. The AMR can increase voice capacity by 150% compared to the 
GSM. Tables 8.4 and 8.5 provide details of AMR speech codecs. 

The AMR codec allows dynamic management of voice quality and error con- 
trol to provide good voice quality even under adverse radio conditions. AMR is 
not only used in GSM, but also in EDGE and UMTS networks [15]. It is designed 
to work with both GSM full-rate (one user per each of eight time slots in each 
radio channel) and GSM half-rate (two users per time slot). AMR defines multiple 


Table 8.4 ETSI AMR speech coder full-rate (22.8 kbps) submodes. 


Speech codec source rate Channel coding rate 
Submode (kbps) (kbps) 
1 12.2 (US1/GSM EFR) 10.6 
2 10.2 12.6 
3 7.95 14.85 
4 7.4 (IS-641 ACELP) 15.4 
5 6.7 16.1 
6 5.9 16.9 
7 5.15 17.65 
8 4.75 18.05 


8.3 Speech Codecs in European Systems 225 


Table 8.5 ETSI AMR half-rate (11.4kbps) submodes. 


Speech codec source rate Channel coding rate 

Submodes (kbps) (kbps) 

1 7.95 3.45 

2 7.4 (IS-641 ACELP) 4.0 

3 6.7 4.7 

4 5.9 5.5 

5 5.15 6.25 

6 4.75 6.65 


voice encoding rates, each with a different level of error control (see Table 8.4). 
The AMR codec dynamically responds to radio conditions by using the most 
effective mode of operation at each moment of time. Compared to the GSM ЕЕК 
codec, AMR can operate under much worse radio conditions, such as with a 
heavily loaded network. AMR offers the following benefits: 


* Greater spectral efficiency, hence higher capacity from higher frequency 
reuse with frequency hopping 


* Better voice quality throughout the cell, particularly at cell edges and deep 
inside buildings, and increased overall coverage 


* The potential of operating with toll-quality voice in half-rate mode, which 
reduces network costs 


The 12.2 kbps rate of the AMR is the same as GSM ЕЕК codec, and the 
7.4 kbps rate is the same as the IS-136 TDMA codec. The gross bit rate of the 
channel (one time slot) is 22.8 kbps, which is divided into voice information and 
error control. As an example, 7.95 kbps mode means that more than half of the 
bit rate (1.e., 22.8 — 7.95 = 14.85 kbps) can be allocated to channel coding. Ву 
reducing the AMR rate, resistance to errors increases further. Figure 8.2 shows the 
resulting effect from voice quality (MOS) versus the S/I ratio. 

Dynamic capability means AMR can compensate for the higher error rates 
arising from techniques such as tighter frequency reuse and higher fractional net- 
work loading, which inherently force the mobile to operate at lower S/I. 

The six submodes of AMR half-rates are given in Table 8.5. Since the gross 
bit rate in a half-rate channel is only 11.4 kbps, a much smaller number of bits is 
available for channel coding, thus requiring a better S/I. But with a better radio 
signal, AMR can enable half-rate operation, which translates to more users in 
the same number of radio channels. AMR half-rate mode is further enhanced in 
EDGE radio networks where more bits per time slot are available. 
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Figure 8.2 MOS versus S/I for AMR codec. 


8.4 CELP Speech Codec 227 


The AMR codec operates on speech frames of 20ms corresponding to 
160 samples at the sampling frequency of 8000 samples per second. Depending 
on the air interface loading and quality of speech connections, the bit rate of the 
AMR speech connection can be controlled by the radio access network. During 
high loading, such as during busy hours, it is possible to use lower AMR bit rates 
to offer higher capacity while providing slightly lower speech quality. Also, if the 
mobile is running out of the cell coverage area and using maximum transmission 
power, a lower AMR bit rate can be used to extend the cell coverage area. With 
the AMR codec it is possible to achieve a trade-off between the network's capacity, 
coverage and speech quality according to the operator's requirements. 


Example 8.1 
The coverage gain in dB for the AMR is given as: 


DPDCH (kbps) + DPCCH 


101 
0lo8| SPDCHI(AMR bit rate (kbps))] 4 DPGCH 


Assuming the power difference between the dedicated physical control 
channel (DPCCH) and dedicated physical data channel (DPDCH) of the WCDMA 
to be —3.0dB for 12.2kbps AMR speech, calculate the gain in the link budget 
in dB by reducing the AMR bit rate from 12.2 to 7.95 kbps, and by reducing the 
AMR bit rate from 12.2 to 4.75 kbps. 


Solution 


(a) 


12.2 + 12.2 x D А 101og| 15315. = 1.15dB 


Coverage gain — 10log| 7954 122 x 10—30 14.064 


(b) 


12.2 + 12.2 x 1| — 101 |1832 


4.75 + 12.2 х 10-310 mH Sena 


Coverage gain = 10log 


8.4 CELP Speech Codec 


Code excited linear predictive (CELP) codec dynamically selects one of the four 
data rates every 20 ms, depending on the speech activity. The four rates are 8kbps 
(full-rate), 4 kbps (half-rate), 2 kbps (quarter-rate), and 1 kbps (eighth-rate). Typi- 
cally, active speech is coded at the 8kbps rate, while silence and background 
noise are coded at the lower rates. MOS testing has shown that QCELP pro- 
vides speech quality equivalent to that of 8kbps VSELP, while maintaining an 
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Table 8.6 Bit allocation for CELP at 8kbps (full rate). 
LPC 40 
Pitch 10 10 10 10 
Code-book 
Parameter 10 10 10 10 10 10 10 10 


average data rate under 4kbps in a typical conversation. Figure 8.3 shows block 
diagrams of the encoder/decoder. The bit allocation for each data rate is given in 
Tables 8.6, 8.7, 8.8, and 8.9, respectively. A 10th order LPC filter is used. Its coef- 
ficients are encoded using linear spectral pair (LSP) frequencies due to the good 
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Table 8.7 Bit allocation for CELP at 4kbps (half rate). 


LPC 20 


Pitch 10 10 


Code-book 
Parameter 10 10 10 10 


Table 8.8 Bit allocation for CELP at 2kbps (1/4 rate). 


LPC 10 
Pitch 10 
Code-book Parameter 10 10 


Table 8.9 Bit allocation for CELP at 1kbps (1/8 rate). 


LPC 10 
Pitch 0 
Code-book Parameter 6 


quantization, interpolation, and stability properties of LSPs. LSP is a representa- 
tion of digital filter coefficients in pseudo-frequency domain. 


8.5 Enhanced Variable Rate Codec 

The CDMA Development Group’s (CDG) enhanced variable rate codec (EVRC) 
takes advantage of signal processing hardware and software techniques to 
provide 13 kbps voice quality at 8kbps data rate, thereby maximizing both qual- 
ity and system capacity [13,14]. MOS data has shown that the 8kbps EVRC 
(see Figure 8.4) compares favorably to 16 kbps LD-CELP and ADPCM, the industry 
standards for comparison. More important, the tests have shown that EVRC main- 
tains superior quality over 13 kbps CELP as frame error rates (FERs) rise. 

One of the important and unique aspects of CDMA wireless systems is that 
while there are limits to the number of mobile calls that can be handled by a given 
carrier at a time, this capacity limit is not a fixed number. In CDMA, cell cover- 
age depends on the way the system is designed and implemented. System capacity, 
voice quality, and coverage are all interrelated, enabling a service provider to 
trade any one off against the other two. 

To maximize the number of simultaneous calls that can be handled at any 
given time in the allocated frequency spectrum, digital wireless systems utilize 
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Figure 3.4 Enhanced variable rate codec (ЕМАС). 


speech compression between the mobile and base stations. A lower speech trans- 
mission rate enables a higher number of simultaneous calls that a system can 
handle at any given time within the allocated carrier frequency spectrum. The 
variable rate vocoder in CDMA uses the smallest number of bits to represent each 
call without sacrificing voice quality. 

The basis of the standard EVRC algorithm is the Relaxed Code-Excited 
Linear Predictive (RCELP) coding. RCELP coding is a generalization of the CELP 
speech coding algorithm. It is particularly well suited for variable rate operation 
and robustness in the CDMA environment. CELP uses 20 ms speech frames for 
coding and decoding. In each 20 ms time interval, the encoder processes 160 sam- 
ples of speech. With variable rate coders, the encoder examines the contents of 
each speech frame to determine the necessary coding rate. Depending on the voice 
waveform (volume, pitch, rate, and so on), the coder represents speech at one of 
three bit rates: 8, 4, or 1 kbps. As a result, the average bit rate is less than 8kbps. 
This differs from a half-rate or multirate coder, where the bit rate is determined 
once for each call. In addition, when no voice is detected, the vocoder drops its 
encoding rate and the effective bit rate goes to 1 kbps, further reducing the inter- 
ference energy produced. 

CELP codecs use three sets of bits to represent speech: linear predictor filter 
coefficients, pitch parameters, and excitation waveform. For each 20 ms speech 
frame, the CELP algorithm examines the data and generates 10 linear prediction 
coding filter coefficients. With EVRC, the coefficients are represented by a vector, 
which is a set of the most likely usable coefficients. Increased or decreased bit 
precision is applied as necessary. 

CELP speech coders also perform long-term pitch analysis to generate a 
7-bit pitch period and a 3-bit pitch gain. The analysis is based on a mathematical 
model of the human vocal track. At the different rates, the coder performs this 
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pitch analysis on either four 5-ms subframes, two 10-ms subframes or one 
20-ms frame. The result is a variable number of bits per frame representing the 
pitch information. EVRC makes two pitch measurements and uses wrapped pitch 
delays, removing the requirement for a large number of bits and increased com- 
putations for fractional pitch delays. 

The excitation waveform for every frame or subframe is selected from a 
codebook consisting of a large number of candidate waveform vectors. The code- 
book vector chosen to excite the speech coder filters minimizes the weighted error 
between the original and synthesized speech. The technique used by EVRC to 
reduce the number of bits required for linear predictor coefficients and pitch syn- 
thesis enables the algebraic codebook to generate excitation. As a result, EVRC 
has higher voice quality. 

Unlike conventional CELP encoders, EVRC does not attempt to match the 
original speech signal exactly. Instead, EVRC matches a time-wrapped version of 
the residual that conforms to a simplified pitch contour. The contour is obtained 
by estimating the pitch delay in each frame and linearly interpolating the pitch 
from frame to frame. While this adds to computational complexity, the result is 
higher voice quality per bit transmitted. 

The simplified pitch representation also leaves more bits available in each 
packet for the stochastic excitation and channel impairment protection than 
would be possible if a traditional fractional pitch approach were used. The result 
is enhanced error performance without degraded speech quality at the small cost 
of added processing requirements. 

EVRC also enhances call quality by suppressing background noise. The 
IS-127 [9] standard recommends a noise suppressor algorithm, but allows system 
designers to define their own. This is an important factor in choosing a processing 
platform, making programmable DSPs a desirable choice. 

The EVRC algorithm offers a significant performance improvement over the 
IS-96A speech codec. Table 8.10 shows the performance of the CDMA Devel- 
opment Group’s 13kbps (CDG-13 kbps) speech codec along with IS-96A and 
EVRC codecs. The CDG-13 kbps offers high voice quality but results in a decrease 
in channel capacity of about 40% over the 8kbps codec (the processing gain 
is reduced from 128 to 85.2, resulting in a 40% reduction in system capacity). 
Table 8.11 provides the bit allocations by packet type. 


Table 8.10 Comparisons of CDG-13kbps, IS-96A and EVRC vocoders in MOS. 


Frame error rate (FER)% CDG-13 kbps IS-96A EVRC 
0 4.00 3.29 3.95 
1 3.95 3.17 3.83 
2 3.88 2.77 3.66 
3 3.67 2.55 3.50 
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Table 8.11 Bit allocations by packet type in EVRC. 
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LSP (Line Spectral Pair) = A representation of digital filter coefficient in a pseudo frequency domain. 


This representation has good quantization and interpolation properties. 


ACB = Adaptive Codebook 
FCB = Fixed Codebook 


3.6 Channel Coding 


High-speed digital communication systems development demands the optimiza- 


tion of: 


e Data transmission rate 
e Data reliability 

* Transmission energy 

* Bandwidth 

* System complexity 

* Cost 


Error correcting codes help to meet the requirements cost effectively with a 
reduced cost. A higher error correction code performance offers more flexibility to 
a designer in determining the required transmission energy, bandwidth, and system 
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complexity. Signal-to-noise ratio (SNR) improvement of a communication channel 
depends on the error correction code used and the channel’s characteristics. 

Error control coding is the process of adding redundant information to a 
message to be transmitted that can then be used at the receiving end to detect and 
possibly corrects errors in the transmission. Since the redundant information adds 
overhead to the transmission, the type of coding must be chosen based upon how 
many errors the system is expected to see, and whether the capability to request 
retransmission of data is available. There are two basic error control coding clas- 
sifications: automatic repeat request (ARQ) and forward error correction (FEC). 
ARQ is a detection-only type coding, in which transmission errors can be detected 
by the receiver but not corrected. The receiver must ask for any data received and 
request that detected errors be retransmitted. FEC allows not only detection of 
errors at the receiving end but correction of errors as well. We primarily focus on 
the FEC techniques and present the error correction codes (i.e., block, convolu- 
tional, and turbo) that are generally used for FEC. 

Reed-Solomon (RS), Viterbi (V) Convolutional, and concatenated Reed- 
Solomon Viterbi (RSV) are the most common error correction codes implemented 
today. At a bit error rate (BER) of 1076, these codes are at least 2.5 to 3.0 dB short 
of the Shannon limit in an additive white Gaussian noise (AWGN) channel. Turbo 
codes have been shown to perform within 1 dB of the Shannon limit at a BER of 
107%. Turbo codes break a complex decoding problem into simple steps, in which 
each step is repeated until a solution is reached. 


8.6.1 Reed-Solomon (RS) Codes 

RS coding is a type of FEC. It has been widely used because of its relatively large 
error correction capability when weighed against its minimal added overhead. RS 
codes are also easily scaled up or down in error correction capability to match the 
error rates expected in a given system. It provides a robust error control method 
for many common types of data transfer mediums, particularly those that are 
one-way or noisy and sure to produce errors. 

In block codes a sequence of K information symbols is encoded in a block 
of N symbols, N > K, to be transmitted over the channel. For a data source that 
delivers the information bits at the rate B bps, every Т seconds the encoder receives 
a sequence of K — BT bits which defines a message. After K information bits have 
entered the encoder, the encoder generates a sequence of coded symbols of length 
N to be transmitted over the channel. In this transmitted sequence or codeword, N 
must be greater or equal to K in order to guarantee a unique relationship between 
each codeword and each of the possible 2* messages. Such a code which maps a 
block of K information symbols into a block of N coded symbols is called an (N,K) 
block code. The code rate is r = K/N bits/symbol, N is called the block length. 

RS codes are an example of a block coding technique. The data stream to 
be transmitted is broken up into blocks and redundant data is then added to each 
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Figure 8.5 RS system level block diagram. 


block. The size of these blocks and the amount of redundant data added to each 
block is either specified for a particular application or can be user-defined for a 
closed system. Within these blocks, the data is further subdivided into a number 
of symbols, which are generally from 6 to 10 bits in size. The redundant data then 
consists of additional symbols being added to the end of the transmission. The 
system-level block diagram for an RS codec is shown in Figure 8.5. 

The original data, which is a block consisting of N-R symbols, is run through 
an RS encoder and R check symbols are added to form a code word of length N. 
Since RS can be done on any message length and can add any number of check 
symbols, a particular RS code is expressed as RS (N, N-R) code. N is the total 
number of symbols per code word; R is the number of check symbols per code 
word, and N-R is the number of actual information symbols per code word. 

RS encoding consists of the generation of check symbols from the original 
data. The process is based upon finite field arithmetic. The variables to generate 
a particular RS code include field polynomial and generator polynomial starting 
roots. The field polynomial is used to determine the order of the elements in the 
finite field. 

Another system-level characteristic of RS coding is whether the implementa- 
tion is systematic or nonsystematic. A systematic implementation produces a code 
word that contains the unaltered original input data stream in the first R symbols 
of the code word. In contrast, in a nonsystematic implementation, the input data 
stream is altered during the encoding process. Most specifications require system- 
atic coding. 

The simplified schematic representation for a systematic RS encoder is shown 
in Figure 8.6. The input data stream is immediately clocked back out of the func- 
tion into the check symbol generation circuitry. The fact that the input data stream 
is clocked out immediately without being altered means that the implementation 
is systematic. A series of finite fields adds and multiplies results in each register 


236 8 Speech Coding and Channel Coding 


Output Select 


C9 C9 


Check Symbol R Check Symbol R-1 Check Symbol 1 


Co P md 


Clock 
Input Data 


Q) Finite field multiplier 
CD) Finite field adder 


Figure 8.6 Systematic RS encoder schematic representation. 


(Division by the generator polynomial) (Find factors in remainder) (Evaluate polynomials to find errors) 


Corrected 
Codeword 


Syndrome Euclid Chien 
Calculations Algorithm Search 


Flag 


Figure 8.7 RS decoder block diagram. 


containing one check symbol after the entire input stream has been entered. At that 
point, the output select is switched over to the check symbol registers, and the 
check symbols are shifted out at the end of the original message. 

The size of the encoder is most heavily affected by the number of check sym- 
bols required for the target RS code. The total message length, as well as the field 
polynomial and first root value, do not have any appreciable effect on the device 
performance. 

A typical RS decode algorithm consists of several major blocks. The first 
of these blocks is the syndrome calculation, where the incoming symbols are 
divided into the generator polynomial, which is known from the parameters of 
the decoder. The check symbols, which form the remainder in the encoder section, 
will cause the syndrome calculation to be zero in the case of no errors. If there 
are errors, the resulting polynomial is passed to the Euclid algorithm, where the 
factors of the remainder are found (see Figure 8.7). The result is evaluated for 
each of the incoming symbols over many iterations, and any errors are found and 
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corrected. The corrected code word is the output from the decoder. If there are 
more errors in the code word than can be corrected by the RS code used, then the 
received code word is output with no changes and a flag is set, stating that the 
error correction has failed for that code word. 

The error correction capability of a given RS code is a function of the num- 
ber of check bits appended to the message. In general, it may be assumed that cor- 
recting an error requires one check symbol to find the location of the error, and a 
second check symbol to correct the error. In general then, a given RS code can cor- 
rect R/2 symbol errors, where R is the number of check symbols in the given RS 
code. Since RS codes are generally described as an RS (N, N-R) value, the number 
of errors correctable by this code is [N- (N-R)]/2. This error control capability can 
be enhanced by use of erasures, a technique that helps to determine the location 
of an error without using one of the check symbols. An RS implementation sup- 
porting erasures would then be able to correct up to R errors. 

Since RS codes work on symbols (most commonly equal to one 8-bit byte) as 
opposed to individual data bits, the number of correctable errors refers to symbol 
errors. This means that a symbol with all of the bits corrupted is no different than a 
symbol with only one of its bits corrupted, and error control capability refers to the 
number of corrupted symbols that can be corrected. RS codes are more suitable to 
correct consecutive bits. RS codes are generally combined with other coding meth- 
ods such as Viterbi, which is more suited to correcting evenly distributed errors. 

The effective throughput of an RS decoder is a combination of the number 
of clock cycles required to locate and correct errors after the code word has been 
received and the speed at which the design can be clocked. Knowing the latency 
and clock speed allows the user to determine how many symbols per second may 
be processed by the decoder. In the RS code, there are two RS decoder choices: a 
high-speed decoder and a low-speed decoder. The trade-off is that the low-speed 
decoder is usually approximately 20% smaller in device utilization. Note that 
both decoders operate at the same clock rate, but the low-speed decoder has a 
longer latency period, resulting in a slower effective symbol rate. As the number 
of check symbols decreases, the complexity of the decoder decreases, resulting in 
a smaller design and an increase in performance. 

Ina real-life RS coding implementation, functions that tend to reside on either 
side of the RS encoder or decoder are often implemented in programmable logic. 
One function that often resides after an RS encoder is an interleaver. The task of 
an interleaver is to scramble the symbols in several RS code words before trans- 
mission, effectively spreading any burst error that occurs during transmission over 
several code words. Spreading this burst error over several code words increases 
the chance of each code word being able to correct all of its induced errors. 


8.6.2 Convolutional Code 
Convolutional codes are suitable when the information symbols to be transmitted 
arrive serially in long sequences rather than in blocks. In convolutional codes, 
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long sequences of information symbols are encoded continuously in serial form. 
To provide the extra bits required for error control, an output rate greater than 
the message bit is achieved by connecting two or more mod-2 adders to the shift 
registers (see Figure 8.8). Each message bit influences a span of n(L + 1) succes- 
sive output bits. The quantity z(L + 1) is called the constraint length measured in 
terms of encoded output bits, where L is the encoder's memory measured in terms 
of input message. L represents the number of shift-registers in the encoder. 

One at a time the symbols enter into the encoder, which has some finite 
memory capacity. The information symbols are sequentially shifted through an 
L-stage shift register, and following each shift some number, v, of coded symbols 
are generated and transmitted. These v coded symbols are obtained by parity 
checking, that is, by modulo-2 addition of the contents of various stages of the 
shift register according to the specific code. The length K = L + 1 is called the 
constraint length of the code, and the code rate is r = 1/v bit per transmitted 
symbol. 

A binary convolutional code of rate 1/v bits per symbol can be generated 
by a linear finite-state machine consisting of an L-stage shift register, v modulo-2 
adders connected to some of the shift registers, and a commutator that scans the 
output of the modulo-2 adders. The whole system is called a convolutional encoder 
(see Figure 8.8). 

The error-correcting capability of a convolutional coding scheme increases 
as rate r decreases. However, the channel bandwidth and decoder complexity both 
increase with K. The advantage of lower code rates when using a convolutional 
code with coherent phase-shift-keying (PSK), is that the required E,/No is 


Rate (r) = 1/2 9o > Co 
Constraint length K = 9 
> « 
»$—| x, Xo Хз H4 Xx, Xs Xs r9 x; Xs 
€ Z 
= Shift Register 
> « 
Information Bits (input) 
9 > Сі 


Code Symbols (output) 


Figure 8.8 Convolutional encoder. 
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Figure 8.9 Convolution encoder with K = 4 and r = 1/2. 


decreased, permitting the transmission of higher data rates for a given amount 
of power, or permitting reduced power for a given data rate. Simulation studies 
have indicated that for a fixed constraint length, a decrease in code rate from 1/2 
to 1/3 results in reduction of the required E,/No of about 0.4dB. However, the 
corresponding increase in decoder complexity is about 17%. For smaller values 
of code rate, the improvement in performance relative to the increased decoding 
complexity diminishes rapidly. 

The major drawback of the Viterbi algorithm is that while error probability 
decreases exponentially with constraint length, the number of code states, and 
consequently decoder complexity, grows exponentially with constraint length. 


Example 8.2 

Figure 8.9 shows a convolution encoder with К = 4 and r = 1/2. The generator 
polynomials g, and g, are 1 + x? + x? and 1 + x + x? + x^, respectively. 
If the input is 1 1 1 0 1 (first bit), calculate the output of the encoder. 


Solution 
Refer to Table 8.12. 

Figures 8.10 and 8.11 indicate the implementations of convolutional coding 
in GSM for downlink and uplink. Figure 8.10 shows the downlink channel cod- 
ing that is used with the GSM EFR speech coder and 8-PSK modulation. The bits 
are combined such that every two class IA bits are used with one class II bit to 
form the first 89 triads. The remaining 44 triads are formed by using three class 
IB bits. 

For the uplink (Figure 8.11) the bits are combined in a somewhat similar 
manner. The 86 triads consist of two class IA bits and one class II bit, three triads 
contain two class IB bits along with one class II bit, and 35 triads consist of three 
class IB bits. 
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Table 8.12 Input /output state table of the encoder. 


Input after each shift* X0 (2x) X1(=x2)* Х2(=х3)* v1 v2 
1 0 0 0 1 1 
0 1 0 0 0 1 
1 0 1 0 0 0 
1 1 0 1 0 1 
1 1 1 0 0 1 


The bits in columns marked with an * are added using modulo-2 to produce V1 after each shift. The output 
of the encoder is 1010001011. 


Convolutional 


8 CRC bits 
E =1/2,K= 
Speech Coder ncoder r= 1/2, 9 
IA 81 bits 89 bits 178 bits 
2x89 > 
Punching 
244 IB 74 bits 148 | 148 -| 132 bits 
bits 2x74 16 = > 
132 
Convolutional 
Il 89 bits Encoder 


Figure 8.10 Channel coding (downlink) with GSM EFR speech coder. 


The triads are reordered to provide additional interleaving gain, and then 
intra-slot interleaving is applied. There are three primary interleaving options: 
one-slot, two-slot, and three-slot. In the one-slot interleaving, there is no intra-slot 
interleaving and the current triads are simply transmitted in the current slot. 

In the two-slot interleaving, certain triads (from the current triad vector) are 
transmitted in the current slot, and the remaining triads in the next slot. Thus, the 
current slot contains triads from the current and previous triad vector. 

In the three-slot interleaving, the concept is extended to include another set 
of triads in each transmitted slot. Certain triads from the current triad vector are 
transmitted in the next slot, and the remaining triads are transmitted in the slot 
after the next slot. Thus, the current slot contains triads from the current triad 
vector, the previous triad vector, and one before the previous triad vector. 
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Figure 8.11 Channel coding (uplink) with GSM EFR speech coder. 


8.63 Turbo Coding 
A turbo decoder consists of two concatenated decoders, each providing soft 
information (see the next section) and so-called intrinsic information. Two main 
classes of algorithms available for turbo codes are soft-output Viterbi algorithm 
(SOVA) and iterative soft-input and soft-output decoding algorithms such as the 
symbol-by-symbol maximum a posterior algorithm, which is more complex but 
yields better performance. Since the capacity of a CDMA system is strongly depen- 
dent on the required E,/No value of the receiver, any improvement in the E,/No 
value due to coding translates directly into capacity increase. 

The inner receiver's (in serial arrangement) task is to provide the best esti- 
mate for the outer receiver. It deals with the following signal impairments: 


* The presence of multipath components 
* The presence of multi-user interference (both inter- and intracell) 
* The fading of each transmission path 


* The near-far effect due to the relative position of all mobiles and base 
station 


* The time-varying nature of these impairments 
These issues are tackled with a combination of the following techniques: 


* Channel estimation and tracking 


* A maximum ratio combination-based (coherent) Rake receiver, to take 
advantage of multipath characteristics 


• Multi-user detection (MUD) schemes, such as interference cancellation (IC) 
or decorrelating receivers 
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* Fast power control based on SNR estimation 


e Antenna arrays (in the base station) to provide another form of diversity 


(space diversity) 


Turbo codes may use serial (concatenated) and/or parallel recursive convolu- 
tion codes. Recursive means the output not only depends on the input sequence 
but also depends on the previous output. A turbo encoder uses two convolutional 
encoders separated by an N-bit random interleaver or permuter, together with an 
optional puncturing mechanism. The interleaver is used to spread coded symbols 
from the other encoder or from the input. The input to an encoder can be from 
an input sequence and/or from a coded output from another encoder. Instead of 
cascading the encoders in the usual serial fashion, they can be arranged in parallel 


concatenation (see Figure 8.12). 
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Figure 8.12 Turbo encoding and decoding. 
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The function of the permuter is to take each incoming block of N data bits 
and rearrange them in a pseudo-random fashion prior to encoding by the second 
encoder. Unlike the classical interleaver (e.g., block or convolution interleaver), 
which arranges the bits in some systematic manner, it is important that the per- 
muter sort the bits in a manner that lacks any apparent order. It is also important 
that N be selected quite large (N > 1000). The role of the turbo code puncture 
is identical to that of its convolutional code counterpart, to periodically delete 
selected bits to reduce coding overhead. 

Each decoding process yields a soft output decision for the next decoder. The 
key component is the soft input, soft output (SISO) decoder. To achieve the ben- 
efits of turbo code, several iterations are provided. Thus, the turbo codes are pro- 
cessing intensive and are applied to less delay-sensitive applications such as data. 

Turbo codes have been implemented in both software and hardware as a 
single integrated circuit. Turbo codes don’t suffer from the error at low BERs that 
have been attributed to other codes. Turbo codes are capable of providing high 
coding gain, even with high code rates. 

Turbo codes provide about 1.5 to 3 dB bit energy-to-noise improvement over 
the current R-S and RSV error correction codes. A 1.5 to 3.0dB performance gain 
allows the system developer to reduce transmitter power and/or bandwidth and 
still maintain the same BER performance. Conversely, a 1.5 to 3dB improvement 
can be used to improve overall system performance if transmitter power is not 
reduced. The use of turbo codes can allow the system engineer to reduce antenna 
size, lowering system cost. When used to provide improved BER performance, 
turbo codes can also lead to a clearer image transmission, improved audio, greater 
range, or better data integrity. A turbo code is applicable where digital data is 
transmitted over a noisy channel because it spreads error uniformly over the inter- 
leaved duration. Turbo codes are better than convolutional codes due to their 
strength in nonlinear coding/decoding and feedback property. Turbo codes can 
support the data rates achieved with other error correction codes while offering 
improved correction capability. 

Figure 8.13 provides a comparison of a turbo code having constraint length 
K = 4 decoded with 4 iterations with a convolutional code of constraint length 
K = 9 decoded with a Viterbi decoder. Figure 8.13 shows the performance of a 
rate 1/3 turbo code compared to the corresponding rate 1/3 convolutional code. 
The results indicate that the turbo code out-performs the corresponding convolu- 
tional code with the same decoding complexity for data rates larger than 9.6 kbps; 
the improvement in performance increases with the data rate for a fixed frame 
length of 20ms. The performance improvement is due to the fact that the number 
of bits in the 20ms frames increases with the data rate and the performance of a 
turbo code improves with the number of bits in the frame. With a large number 
of bits in a frame, the interleaver separating the codes can randomize the errors 
more effectively. 
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Figure 8.13 Performance of turbo code compared with convolutional code. 


8.6.4 Soft and Hard Decision Decoding 

The decoding of a block code can be performed with hard or soft decision input, 
and the decoder may output hard or soft decision data. In hard decision decod- 
ing, each received channel bit is assigned a value of 1 or 0 at the demodulator 
depending whether the received noisy data is higher or lower than a threshold. 
The decoder then uses the redundancy added by the encoder to determine if there 
are errors, and, if possible, to correct the errors. The desired output of the decoder 
is a corrected code word. 

A soft decision decoder receives not only the binary value of 1 or 0, but also 
a confidence value associated with the given bit. If the demodulator is certain that 
the bit is a 1, it places very high confidence on it. If it is less certain, it places a 
lower confidence value. A soft input decoder can output either hard decision data 
or soft decision data. For example, a Viterbi decoder receives soft information 
from the demodulator and outputs hard decision data. The decoder can use the 
soft information to determine if a given bit is a solid 1 or solid 0, and it outputs 
this hard decision. 

A SISO decoder both receives soft decision data and generates soft decision 
output. For each bit in the code word, the SISO decoder examines the confidence 
of the other bits in the code word, and, using the redundancy of the code, gener- 
ates an updated soft output for the given bit. 
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RS error correction codes are the “standard” algorithm for FEC. RS codes 
are block codes that are very efficient for error correction implemented either in 
hardware or software. RS codes are hard decision codes. RS codes followed with 
concatenated Viterbi codes (RSV) offer an improvement over the stand-alone RS 
codes in terms of BER performance. 

The concept of SISO decoders has been applied to turbo codes. A turbo 
code feeds demodulated soft decision data into a SISO decoder. The output of this 
decoder is then fed into the same (or a different) SISO decoder. The output of this 
decoder is then fed again. This iterative process continues until a confident solu- 
tion is reached. The concept of feeding the output back into the input is similar to 
a turbo charger of an engine, therefore the name turbo code is used. 

For a turbo code to be effective, the given data must be encoded with two 
(or more) different codes. Then, when decoding, each of the codes will modify the 
confidence of each bit. With each iteration, all of the codes modify the confidence 
of the data, so each code sees slightly different data for each iteration. Each code 
pushes the confidence of a given bit higher or lower, and consequently changes 
the hard decision value of the bits in error. Eventually, the data will settle on an 
arrangement in which all codes are pushing the confidence of all bits higher. The 
hard decision values at this point are closer to the transmitted data. 


8.65 Bit-Interleaving and De-Interleaving 

Transmission errors occur randomly in bursts. Burst errors happen when the signal 
undergoes deep fades. The ability of FEC is limited in correcting a long string of 
errors, bit-interleaving is used between the encoder and modulator. At the receiver, 
the de-interleaver is employed between the demodulator and FEC decoder. 

The convolutional codecs perform poorly on bursts of errors. Bit-interleaving 
is used to randomize the errors so that the convolutional codec can correct them. 
The purpose of bit-interleaving is to avoid loss of consecutive information bits. 
Interleaving is performed by storing the data in a table containing rows and 
columns at the transmitter. The data is written in rows and transmitted in a verti- 
cal direction (according to columns). At the receiver, the data is written and read 
in the opposite manner. 

GSM blocks of full-rate speech are interleaved over 8 bursts; i.e., 456 bits 
of one block are divided into 8 sub-blocks, each containing 57 bits. Each sub- 
block is carried by a different burst and in a different TDMA frame. Thus a burst 
contains contributions from two successive speech blocks, j and j + 1. To avoid 
proximity relations between successive bits, bits from block j use even positions 
in the burst and bits from block j + 1 use odd positions. This ensures sufficient 
redundancy within the interleaving process of the GSM signal structures to allow 
for one frame in the five to be lost without significant loss in voice quality. 

De-interleaving in the receiver is the reverse operation of interleaving. The 
major drawback of de-interleaving and interleaving is that they introduce delay. 
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The delay amounts to the transmission time from the first burst to the last burst 
in the block and is equal to 8 TDMA frames, i.e., about 37 ms. 


Example 8.3 
Using a bit string of 0000011100010001 (first bit) demonstrate operations 
of 4 X 4 bit interleaver/de-interleaver in converting a burst error into bit errors. 


Solution 
Input to the interleaver: 


0000011100010001>5 write the data in rows 


ORR 
оноо 
оноо 
оооо 


Output of the interleaver: 0000010001000 111 


оо о н 
о ою н 
оњ һы н 
о о1о о 


Input to the de-interleaver: 0000010001000111— 


Burst error is indicated by italic bold-face (under-score). 


The output of the de-interleaver: 0000011100010001 


8.7 Summary 

In this chapter, we presented speech codec attributes and briefly discussed different 
coding schemes. We provided details of the enhanced variable rate codec (EVRC) 
which takes advantage of a signal processing hardware and software technique to 
provide 13 kbps voice quality at 8 kbps data rate by maximizing both quality and 
system capacity. MOS data indicates that 8kbps EVRC compares favorably to 
16 kbps LD-CELP and ADPCM, the industry standards for comparison. The tests 
also show that EVRC maintains superior quality over 13kbps CELP as frame 
error rates increase. 

We focused on three types of channel coding schemes: RS codes, convo- 
lutional codes, and turbo codes. The error correcting capability of a convolu- 
tional coding scheme increases as rate decreases and constraint length increases. 
However, the number of code states and, consequently, decoder complexity, grows 
with the constraint length. Turbo codes use serial and/or parallel recursive con- 
volutional codes. They appear to approach the Shannon limit with large enough 
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iterations of decoding. Turbo codes spread error uniformly over the interleaved 
duration and, therefore, they are very useful for fading channels. Turbo codes 
provide an additional coding gain of 1 to 2 dB over convolutional codes. 


Problems 

8.1 Define speech coding methods used in digital communication. 

8.2 What are the main features of a hybrid coding scheme? 

8.3 List the main attributes of a speech codec. 

8.4 What is a CELP codec? 

8.5 List steps used in speech processing in a vocoder. 

8.6 What is ап AMR codec? 

8.7 How is capacity improvement in a GSM system achieved with the AMR 
codec compared to the FER codec? 

8.8 What are the information rates in EVRC codec for rate set 1 in the 
CDMA IS-95 B? 

8.9 Discuss various forward error correcting schemes used in digital communi- 
cation. Why are convolutional schemes used in wireless communications? 

8.10 Calculate the output of the convolution encoder shown in Figure 8.8, if 
the input is 1 0 1 00 1 1 (first bit). 

8.11 Why is bit-interleaving used in wireless communications? 

8.12 Using a bit string of 1011000001110001000101010dem- 
onstrate operations of 5 X 5 bit interleaver/de-interleaver in converting 
burst error into bit errors. 
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CHAPTER 9 


Modulation Schemes 


9.1 Introduction 

The digital signals that are developed in the process of transmitting voice, data, video, 
and signaling information are generated at low data rates. These data rates, typi- 
cally 1 to 50kbps, are so low in frequency that their transmissions directly from the 
transmitter to the receiver would require antennas that are thousands of meters long. 
Furthermore, the signals from one transmitter would interfere with signals from other 
transmitters if they all use the same frequency band. Therefore, baseband signals 
(see Chapter 4) are modulated onto a radio frequency carrier for transmission from 
the transmitter to the receiver [2,3]. The radio environment at 800—2000 MHz (used 
for mobile communications) is hostile. We must therefore select modulation schemes 
that are robust. In addition to the modulation schemes we must also choose encoding 
algorithms that improve the performance of the system [9,10]. 

We introduced modulation in Chapter 4. In this chapter we focus primarily on 
three modulation schemes, minimum shift keying (MSK), Gaussian minimum shift 
keying (GMSK), and 7/4-Differential Quadrature Phase Shift Keying (77/4-DQPSK) 
that have been used in different cellular systems [8]. GMSK is the modulation scheme 
used in GSM900, GSM1800, GSM1900, and digital enhanced cordless telecom- 
munications (DECT). MSK was introduced as a first step toward GMSK. Personal 
wireless telecommunications (PWT) and PWT-E (enhanced), the variations of DECT 
for the licensed and unlicensed 1900-MHz band, respectively, in North America, use 
71/4-DQPSK. Since each of these schemes is descended from phase shift keying (PSK), 
we first discuss PSK and then show its relationship to others. 

We also examine quadrature amplitude modulation (QAM) and M-ary 
frequency shift keying (MFSK) schemes [11,13]. 


9.2 Introduction to Modulation 

When we want to send signals over any distance, baseband signaling is not 
sufficient [6]. We must therefore modulate the signals onto an RF carrier. When 
we transmit the digital bit stream, we convert the bit stream into the analog signal, 
a(t)cos(wt + 0). This signal has amplitude a(t), frequency w/(27), and phase Ө. 
We can change any of these three characteristics to formulate the modulation 
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scheme. The basic forms of the three modulation methods used for transmitting 
digital signals are [11]: 


* Amplitude shift keying (ASK) 
* Frequency shift keying (FSK) 
* Phase shift keying (PSK) 


When o and 0 remain unchanged, we have ASK. In this case, the transmitted 
carrier wave takes two amplitude values during the duration of the pulse. When 
a(t) and 0 remain unchanged, we have binary (or M-ary) FSK. In this case the car- 
rier frequency is shifted up or down by a fixed value corresponding to a binary 1 or 
0. When a(t) and o remain unchanged, we have binary (or M-ary) PSK. In binary 
PSK, the information is contained in the phase. During the transmission of a binary 
1 the carrier phase is zero, and the carrier phase is changed to a value of тт during 
the transmission of a binary 0. Hybrid schemes exist where two characteristics are 
changed with each symbol transmitted. The most common method is to fix w and 
change a(t) and 9. This method is known as quadrature amplitude modulation 
(QAM). Each modulation method results in a different transmitter and receiver 
design, different occupied bandwidth, and different error rate [4]. Since all signals 
have a theoretical bandwidth that is infinite, all modulation schemes must be band 
limited. Band limiting introduces detection errors, and the filter bandwidths must 
be selected to achieve an optimization between bandwidth and error rate [12]. 

The baseband outputs of the data transmitters are a series of binary data 
that cannot be sent directly over a radio link. The communications designer must 
choose radio signals that represent the binary data and allow the receiver to decode 
the data with minimal errors. For the simplest binary signaling system, we choose 
two signals denoted by so(t) and $1(ї) to represent the binary values of 0 and 1, 
respectively. Since no channel is perfect, the receiver will also have additive white 
Gaussian noise (AWGN), n(t). The data receiver (Figure 9.1) will then process the 
signal and noise through а filter, h(t), and, at the end of the signaling interval, Т, 
make a determination of whether the transmitter sent a 0 or a 1. 


So(t) or S(t) Linear Filter 
+ n 


AWGN 
AWGN: Additive white Gaussian noise 


Threshold 
Comparison 
A 


Decision 


n(t) 


Figure 9.1 Receiver structure to detect binary signal with AWGN. 
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The energies of 50(#) and s;(t) in a T interval are assumed to be finite and 
denoted as Eo and Fy, respectively. For simplicity we assume that the noise has a 
probability density function of amplitude that is Gaussian and that the noise spec- 
tral density is flat with frequency with the double-sided Power Spectral Density of 
No/2, where No is the noise density. 

When so(£) is present at the filter as an input, its output at time £ = T is 


V = So + №, with so(t) present (9.1) 
where: 


So = output signal component at t = T for the input so(t), and 
N = the output noise component 


Similarly, when s(£) is present at the filter as an input, its output at t = Т is 
V = $4 + N, with 51(ї) present (9.2) 


Since noise is Gaussian with zero mean (implied by its constant PSD), N is 


also Gaussian. The variance of the noise, o?, can be determined as: 
e = | (EAP: Bf (9.3) 
o? = Nof, |HP af (9.4a) 
o? = №: By (9.4b) 


where: 
H(f) is the transfer function of filter, and 


By= ], H(f)? dfis the noise-equivalent bandwidth ог simply the noise bandwidth 
of the receiver filter function H(f) 


Given that so(t) is present at the receiver input, the probability density function 
(PDF) of v is 


(9.5) 


b (vlso) = Ge 


Similarly, when s(t) is present at the receiver input, the conditional probability 
function of v is 


p (vis, = 1 е (9.6) 
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From Figure 9.2, given that so(t) is present, the probability of error is 
P (elso) = [Р (ъ|җ,)Ф (9.7) 
If s4(t) is present, it is 
P (elsi) = f p (vls,)dv (9.8) 


If the a priori probability that so(£) was sent is p, and the a priori probability 
that s1(£) was sent is = 1 — p, then the average probability of error is 


Р, = pP(e|s;) + aP(els,) (9.9) 
CUR а 
p. P|, ОР | = —el x dde (910) 


If we simplify Equation 9.10, differentiate the result with respect to A, and 
then set the derivative equal to zero, we can determine the optimum choice for the 
threshold value, A, to minimize the probability of error P, [13]: 


Sg ccs capp aa 


7g Lyn 5 (9.11) 


In most systems, the values of 0 and 1 are equally likely; if they are not, then 
the designer usually redesigns the encoding method to ensure that they are equally 
likely. Thus, p = q, and 


А= А = LL (9.12) 


For the optimum value of A, with р = q, the probability of error is 


Ss. — S. $,—8 
Р, = lee] E n =o 1 | (9.13) 
20 


2 2/2 -0 


where erfc is the complementary error function = 1 — erf(u) = 20(/2u ). The 
error function, erf(u) is defined as 
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P(V|So) p(v|s,) 


So A 5, 


erf(u) = -2 [eat (9.14) 
and 
Olu) = An [еа (9.15) 
or 
Qu) = = u >> 1 Gaussian integral (9.16) 


Next we want to find the filter that provides the minimum probability of 
error, as expressed by Equation 9.13. At time tọ, the sample value consists of a 
signal-related component go(to) and noise component no(to). This filter is known 
as a matched filter and has a transfer function Ho(f) optimized to provide the 
maximum signal-to-noise ratio (SNR) at its output at time £o. Schwartz shows 
that this filter must be the conjugate match of the signal, s(t). Since we have two 
signals, so(£) and $1(ї), we will need two filters in our receiver design. 

If we transmit a signal, s(t), then it has the Fourier transform, S(w), which 
is a complex function. The optimum or matched filter must have a frequency 
response, H(o), where 
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Н(о) = S*(«)e jet (9.17) 


where: 
S* is the complex conjugate of the Fourier transform of the signal 


In general this filter is not realizable, since analysis will show that it must 
have output before there is input. However, we can design filters that approximate 
the ideal filter. 

The SNR is defined as 


2 = £^o(to) (9.18) 


o2 


It can also be shown that the maximum value for SNR £ is twice the energy 
of the input signal (Ej) divided by the single-sided input noise spectral density, 
regardless of the input signal shape 


2 E Eg 
& max (NU (9.19) 


For a binary system, Equation 9.19 becomes 
| s oh ке. 2 
Bmax = у}, leale) — sot) dt (9.20) 


Since the signals are zero outside the range (0, T), the probability of error 
corresponding to the optimum receiver filter becomes 


P, = lerfc(vz) = Q(V2z) (9.21) 


1 
2 


where: 


If the transmitted pulses are allowed to take on any of M transmitted levels 
with equal probability, then the information rate per transmitted pulse is logzM 
bits. For a constant information rate, the bandwidth of the transmitted signal 
can be reduced by the same factor. With M-ary transmission, we will show that 
the error rates are higher, but if we have sufficient SNR then higher error rates 
will not matter. Thus, we are using excess SNR to code the signal and reduce its 


bandwidth. 
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When we add additional levels to a baseband system, we are reducing the 
distance between detection levels in the receiver output. Thus, the error rate of 
a multilevel baseband system can be determined by calculating the appropriate 
reduction in error distance. If the maximum amplitude is A, the error distance de 
between equally spaced levels at the detector is 


de = 44 (9.22) 


where: 
M = number of levels 


Setting the error distance A of a binary system to that defined in Equation 9.22 
provides the error probability of a multilevel system. 


p,-.1 


M-1 A 
= | er fe} ———__ 9.23 
ea M Jer drum TEN] | 


where: 
The factor (M — 1)/M reflects that the interior signal levels are vulnerable to 
both positive and negative noise. 


The factor 1/log?M arises because the multilevel system is assumed to be 
coded, so symbol errors produce single bit errors (log? М is the number of bits per 
symbol), and the probability of multiple bit error is assumed to be small and can 
be neglected. 

Equation 9.23 relates error probability to peak signal power А2. To determine 
P, with respect to average power, the average power of an M-level system is deter- 
mined by averaging the power associated with various pulse amplitude levels. 


2 EE A V ЗА V 2 
[42]... К +( 34) +... + A2 (9.24) 
, м 

A? lave = —24-— > (j — 12 9.25 

as = sag 3 24 i=) (9.25) 
where: 

the levels a : [+1, +3, +5, ..., +(М — 1) | are assumed to be equally 
likely. 


If T is the signaling interval for a two-level system, the signaling interval Тм 
for an M-level system providing the same data rate is determined as 


T, = Tlog,M (9.26) 
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For a raised cosine filter, the noise bandwidth is В, = ge 
From Equation 9.4, we get 
о? = No 
2T, 
1 [М]? 
Nu 
Substituting Equation 9.28 into Equation 9.23, we get 
= laa c 195 [— xe 
"m (M - 1) M 
M 


The energy per symbol 
Е, = E, log, M = АТ, 


where: 
Ep is the bit energy 


E,log,M 
T 


M 


nA 


Substituting for A from Equation 9.30 into Equation 9.29, we get 


n E, 1/2 | (log, М)!? 
^ |log,M б M-1 


1 ПЕ 


_ Signal power _ Ej(log, M) (1/T),) 
Noise power 


SNR 


SNR = 2log) M| =? 
oe EES 082 x. 


(9.27) 


(9.28) 


(9.29) 


(9.30) 


(9.31) 


(9.32) 


(9.33) 


Another variation of baseband signaling is antipodal baseband signaling 
(APBBS) in which two signals of opposite polarities are sent. If so(t) = —A and 


sı(t) = A for 0 = t ST, then s,(t) — s(t) = 2A. 
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We then calculate the value of z from Equation 9.21 as 
1 [Толу dT. P 
c= qh | GAP de = Т = (9.34) 


where Ер is the energy in either so(£) or s(t), or the bit energy 


Р, = Lese] [E = o| an (9.35) 


APBBS is used to modulate some signal; we will compare its SNR with other 
modulation schemes. 


9.3 Phase Shift Keying 


For binary phase shift keying (BPSK) [5,7], we transmit two different signals. If 
the baseband signal is a binary 0, we transmit: 


Acos(wt + т) = —Acos(ot) (9.36) 
and for binary 1, we transmit: 
A cos (wt) (9.37) 


BPSK сап be considered a form of ASK where each non-return to zero (NRZ) 
data bit of value 0 is mapped into a —1 and each NRZ 1 is mapped into a + 1. 
The resulting signal is passed through a filter to limit its bandwidth and then 
multiplied by the carrier signal coswt (see Figure 9.3). The signal constellation for 
BPSK is shown in Figure 9.4. 


cos wt 


NRZ Data Mapping 
1to +1 
0 to —1 


Pulse Shaping/ 
Filter 


BPSK Signal 


Figure 9.3 BPSK modulator. 
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cos wt 


> Ssinot 


=y 


Figure 9.4 Signal constellation for BPSK. 


We can also define PSK where there are M phases rather than two phases. In 
M-ary PSK, every b (where M = 2°) bits of the binary bit stream are coded as a 
signal that is transmitted as Asin(wt + 9j), = 1, ..., M. 

The error distance of a PSK system with M phases is Asin(a/M) where А is 
the signal amplitude at the detector. A detector error occurs if noise of the proper 
polarity is present at the output of either of the two phase detectors. The probability 
of error is 


E. \12 
= 1 үл 1/2 | b 
P, м) erfc| sin lu | (log,M) a | (9.38) 
The SNR is given as: 
SNR = log, M| =| (for M = 2) (9.39) 
No 


Each symbol has a length of T. Therefore 


E = ÆT (9.40) 
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The rms noise o is: 
N, = 02(2T) (9.41) 


for noise in Nyquist bandwidth. 
The bandwidth efficiency of the M-ary PSK is given as Ж. = 


where R 


is the data rate and B,, is the bandwidth. Next we examine several variations of PSK. 


Example 9.1 
Find Ej/No in dB to provide P, = 107% for BPSK and coherent FSK. 


Solution 
For BPSK 
-EJN 
2 ч) 
Ny 
-¢ 
1076 = — 
2\лё 
where: 
Ё = E/N, 


<. ë = 11.32 = 10.54dB 


FSK requires 3dB more in terms of Ep/Nọo to give the same P, as BPSK, 
i.e., 13.54dB. 


Example 9.2 


The BPSK modulation is used in a channel that adds white noise with single-sided 
PSD No = 10710 W/HZ. Calculate the amplitude A of the carrier signal to give 
P, = 1076 for a data rate of 100 kbps. 


Solution 
From Example 9.1, Ej/No = 10.54dB = 11.32 for P, = 10 6 


Ep AT. M 
No  2No  2NoR 
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Quadrature 


Ades Pn, 


E, 1/2 
x 


А = |2 10-10 x 11,32 x 105]? = 1.505 mv 
9.3.1 Quadrature Phase Shift Keying (QPSK), Offset-Quadrature 


Phase Shift Keying (OOPSK) and M-PSK Modulation [5,7,11] 
For QPSK, M = 4, we substitute M = 4 in Equation 9.38 to get 


"E" „| Бь\!? 
Р, = и erfc | sin E (108,4) | x 
Р, = lere x = o| m (9.42) 


The input binary bit et b, I b = +1; k = 0, 1, 2, ..., arrives at the 
modulator at a rate 1/Tp bps and is separated into two data streams, aj(t) and 
а0(2), containing odd and even bits respectively (see Figure 9.5). The modulated 
QPSK signal s(t) is given as: 


1 T 1 : т 
LL 2 +2 \+ — 2 +2 E 
s(£) E aítcos| mf а | 72000 sin( aft 1] (9.43) 
s(t) = Acos(2mf,t + a + (2) (9.44) 
cos wt 


odd bits, with 
durations 2T, 
even bits, with 
durations 27 


NRZ Data 


Serial to Parallel 
QPSK Signal 


sin wt 


Figure 9.5 QPSK modulator. 
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where: 


In the QPSK, the odd and even pulse streams are transmitted at the rate 
of (1/2) Ть bps and are synchronously aligned. In QPSK, due to the coincident 
alignment of aj(t) and а0(2), the carrier phase can change only once every 2Tp. 
The carrier phase during any 2T, interval can be any one of the four phases as 
shown in Figure 9.6, depending on the values of aj(t) and ao(t) during that inter- 
val. During the next interval, if neither pulse stream changes sign, the carrier 
phase remains the same. If only one of the pulse streams changes sign, a phase 
shift of 7/2 occurs. A change in both streams results in a carrier phase shift of m. 
The 180? phase shifts cause the signal envelope to go through zero momentarily 
(see Figure 9.7). 

In offset QPSK (OQPSK), the timing of the pulse stream a(t) and ao(t) 
is shifted such that the alignment of the two pulse streams is offset by Ty. In 
OQPSK, the pulse stream az(t) and ao(t) are staggered and thus do not change 
states simultaneously. The possibility of the carrier changing phase by « degree is 


cos(2«f,t + 1/4) 


» sin(2uf;t + 1/4) 


Figure 9.6 7/4-OPSK constellation. 
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180 degree phase shift causes 
a drop in signal level and therefore 
causes data errors. 


Figure 9.7 Signal amplitude of QPSK during 180° phase change. 


[4 


g 


(0) T 2T 3T 4T 5T 6T 7T 


Figure 9.8 A comparison of QPSK and OQPSK modulation schemes. 


eliminated, since only one component can make a transition at one time. Changes 
are limited to 0° and +7/2 every Tp seconds (see Figure 9.8). Since the phase tran- 
sitions of 180° are avoided in OQPSK, the signal envelope does not pass through 
zero as it does in QPSK. The high-frequency components associated with the col- 
lapse of the signal envelope are not reinforced. Thus, out-of-band interference is 
avoided. 

In theory, QPSK and OQPSK systems can improve the spectral efficiency of 
mobile communications. They do, however, require a coherent detector. Coherent 
detection requires an accurate carrier phase reference. In general, known pilot 
symbols need to be inserted periodically in the data stream to obtain acceptable 
performance with a coherent detector оп a fading channel. These symbols increase 
both the bandwidth and the required SNR. In a multipath fading environment, 
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the use of a coherent detector is difficult and often results in poor performance 
over noncoherently based systems. The coherent detection problem can be over- 
come by using a differential detector, but then QPSK is subject to intersymbol 
interference which results in poor system performance. The spectrum of OQPSK 
is given as: 


psd(f) = Ты 


Hd (9.45) 
mf. 


Further improvement is possible if the OQPSK format is modified to avoid 
discontinuous phase transitions. This was the motivation in designing continuous 
phase modulation (CPM) schemes. Minimum shift keying (MSK) is one such 
scheme. A comparison of PSD for QPSK and MSK is shown in Figure 9.9. 

Since we often encounter Rayleigh fading (see Chapter 3) in the outdoor 
environment, the BER performance of PSK under flat Rayleigh fading conditions 
is given by 


_1 1 
Pe 2 : 1 + 1M Ey/No)avg eas) 


Fraction of out-of-band power (GSM) 1.0 
MSK 
0.20 
Fraction of out-of-band power (IS-54) 
<— QPSK 
0.05 
E c 
z 9 
j : 
а ш 
QPSK/OQPSK 


1/T, 
Frequency 


Figure 9.9 Comparison of PSD and OPSK and MSK. 
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The symbol error probability for M-PSK under AWGN conditions is given as 


2bE 
sin(m/M) - |22 


Р; = 20 = 


(9.47) 


where: 
b = number of bits per symbol 


Using Gray code, a symbol error is likely to result in only one out of b bit 
errors. 


: _2. | : 2bEp 
<. Рр = b Olsin(q/M) No (9.48) 
For 8-PSK, M = 8 and b = 3: 
261 m, [8| 2 Ep 
Py 32 sing IN 39 0.937 [г (9.49) 
For 16-PSK, M = 16 and b = 4: 
_ О. m, (86 | O Ep 
РЬ 5 Sng No 5 0.552 Mm (9.50) 


In M-PSK modulation, the amplitude of the transmitted signal remains 
constant, thereby yielding a circular constellation. 


9.3.2 a/4-DOPSK Modulation 
We can design a PSK system to be inherently differential and thus solve detec- 
tion problems. 7/4-DQPSK [11] is a compromise modulation method because the 
phase is restricted to fluctuate between +7/4 and +(37)/4 rather than the 7/2 
phase changes for OQPSK. It has spectral efficiency about 20% higher than the 
GMSK modulation used for GSM and DECT. 

qi/A-DQPSK is essentially a 7/4-QPSK with differential encoding of symbol 
phases. The differential encoding mitigates loss of data due to phase slips. How- 
ever, differential encoding results in the loss of a pair of symbols when channel 
errors occur. This can be translated to an approximate 3-dB loss in E,/No relative 
to coherent «/4-QPSK. 
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т/2 


0° 
Зт/2 


Figure 9.10 7/4-DQPSK modulation. 


A m/4-DQPSK signal constellation (Figure 9.10) consists of symbols corre- 
sponding to eight phases. Consider that these eight phase points are formed by 
superimposing two QPSK signal constellations, offset by 45° relative to each 
other. During each symbol period, a phase angle from only one of the two QPSK 
constellations is transmitted. The two constellations are used alternately to trans- 
mit every pair of bits (di-bits). Thus, successive symbols have a relative phase 
difference that is one of the four phases as shown in Table 9.1. 

Figure 9.10 shows the «/4-DQPSK signal constellation. When the phase 
angle of 7/4-QPSK symbols are differentially encoded, the resulting modulation 
is 7/4-DQPSK. This can be done either by differentially encoding the source bits 
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Table 9.1 Phase transitions of 7/4-DOPSK. 


a/4-DOPSK 
Symbol phase transition 
00 45° 
01 135° 
10 —45° 
11 —135? 


Even Bits Pulse Shaper/ , 
Filter 
Delay of Pulse Shaper/ Q 
Tp Filter 


Odd Bits 


NRZ Data 
Serial to Parallel 


Note: Odd bits are delay by T, 
Figure 9.11 ООР5ЅК encoding. 


and mapping them onto absolute phase angles or, alternately, by directly mapping 
the pairs of input bits onto relative phase angles [+1/4, (= 3п)/4] as shown in 
Figure 9.10. The binary stream by(t) entering the modulator is converted by a 
serial to parallel converter into two binary streams bo(t) and b,(t). The bits are 
differentially encoded (see Figure 9.11). 

The in-phase and quadrature components corresponding to the kth symbol 
are given as: 


Ik = Ip-100s(Abg) — Oxs-1sin(Aó) (9.51) 


Ор = Ц-151(Афь) + Op—1c08(Adz) (9.52) 


where: 
I, and Ор are the in-phase and quadrature components of the 7/4-DQPSK 
signal corresponding to the kth symbol, and the amplitudes of I, and О; are 


+1, 0, +172, 
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Since the absolute phase of (k—1)th symbol is og—1, the in-phase and 
quadrature components can be expressed as: 


Ik = coshg—1cos(Adg) — sindg—1sin(Adg) = соѕ(фь-1 + Ao) (9.53) 


Ок = созфь-15їп(Афь) + вїпфь—1сов(Афь) = ѕіп(фь-1 + Афь) (9.54) 


These component signals (Iz, Оһ) are then passed through a baseband filter 
having a raised cosine frequency response as: 


T: 
1 0= | = T, 
; T, l-a и 1 

н) -üh sin ef XJ no-fsim (9,55) 
А fiit. 


where: 
a = the roll-off factor 
T; = the symbol duration 


If g(t) is the response to pulse I; and Ор at filter input, then the resultant 
transmitted signal is given as: 


s(t) = Sgt = КТ,)(соѕф, ' COS of) — » e(t К КТ,)(ѕіпф, sinet) (9.56) 
k k 


s(t) = Set — kT,) + cos(wt + ,) (9.57) 
k 


where: 
2mo = the carrier frequency of the transmission 


The component Фф, results from differential encoding (i.e., $, =, , + Ao, ). 

Depending on detection method (coherent or differential detection). the 
error performance of 7/4-DQPSK can either be the same as ог 3dB worse than 
QPSK. 


Example 9.3 
The bit stream is 001001110100111010010100 and the transmitted signal is 
Acos (wt + ф,). Calculate ф, for ће 7/4-DQPSK modulation method. 
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Table 9.2 Phase angle for 7/4-DOPSK. 


bobe Ad,(degree) — 6, (degree) 


0 
00 45 45 
10 —45 0 
01 135 135 
11 —135 0 
01 135 135 
00 45 180 
11 —135 45 
10 —45 0 
10 —45 —45 
01 135 90 
01 135 225 
00 45 270 


Solution 
See Table 9.2. 


9.3.3 MSK and GMSK Modulation 

The MSK is the constant envelope modulation [5]. It is derived from OQPSK by 
replacing the rectangular pulse in amplitude with a half-cycle sinusoidal pulse. Let 
us consider a data stream {ap}, Ё = 0,1,2, where ag= +1 at arate of R = 1/Tp, and 
Tp is the bit duration. The in-phase and quadrature bit streams аге: 


a(t) dg d, d, 
and 
a(t) =a, а, а; 


The rate of aj(t) апа ao(t) is (1/2Тъ) bit per second. The in-phase, ar(t) and 
quadrature ao(t) signals are delayed by interval Tp from each other. The MSK 
signal is defined as: 


a(t — 2nT,) Я m(t = 2nT,) | 
s(t) = aít)|cos IT, cos 2mf,t + agt) sin IT, sin(2mf.t) (9.58) 
m(t — 2nT,) 
s(t) = cos 2mfit + b (t) - 3 + o, (9.59) 
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where: 
n=0,1,3,... 
b, = 1 юга. ао = —1 
= —1forar.ao = 1 
ф, = 0 for a; = 1 
b, = піогај = —1 


Note that, since the I and О signals are delayed by а 1-bit interval, the cosine 
and sine pulse shapes in Equation 9.58 are actually both in the shape of a sine pulse. 
MSK has the following properties: 


e For a modulation bit rate of R, the high frequency, fg = f + 0.25R when b; = 1, 
and the low frequency, fj, = f — 0.25R when by = —1. 


* The difference between the high frequency and the low frequency is Af — 


fa~ tr =О.5К = = where Ty is the bit interval of the NRZ signal. 
b 
* The signal has a constant envelope. 


The error probability for an ideal MSK system is 


pond f E, 2E, 
E 2SN, Q N, 


This is the same as for QPSK/OQPSK. 

MSK modulation makes the phase change linear and limited to +7/2 over a 
bit interval Tp. This enables MSK to provide a significant improvement over QPSK. 
Because of the effect of the linear phase change, the PSD has low side lobes that 
help to control adjacent-channel interference. However, the main lobe becomes 
wider than QPSK. Thus, it becomes difficult to satisfy the CCIR-recommended 
value of —60 dB side lobe power levels. The PSD for MSK is given as: 


(9.60) 


16T, 
т? 


PSD (f.) = (9.61) 


cos2mf Т, 
1- 16f?T? 


MSK has a narrower bandwidth than BPSK, and is significantly better in terms 
of side lobe level than any unfiltered linear scheme, but it still retains side lobes at 
a level that would give unacceptable adjacent channel interference in most practi- 
cal systems. Any attempt to filter these side lobes out, post-modulation, would 
regenerate envelope variations. Hence, we require a mean to improve the spectrum 
of MSK further. This can be done by filtering the data signal before modulation. 
A wide range of filter responses is possible. The Gaussian filter, which leads to 
GMSK, is the most popular. The bandwidth (B) of the Gaussian filter is quantified 
in the time-bandwidth product, ВТ. The values of 0.3 to 0.5 are used for ВТ. 
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The Gaussian response is interesting, in that the frequency response has the 
same shape as the impulse response. The standard deviation o of the impulse 
response is related to the filter bandwidth B by 


_ log.2 _ 0.2206 
Bee ue (9.62) 
where the impulse response is 
bt) = ld - aen 
o2 


The price of the resulting improvement in bandwidth efficiency is a degradation in 
power efficiency. However, if the time-bandwidth product is not too small (1.е., 0.3 or 
more), the effect is not excessive (less than 1 dB). 

In the case of MSK, BER performance for coherent detection is the same as that 
for deferentially encoded BPSK with coherent detection. BER for GMSK is degraded 
due to inter-symbol interference (ISI) by the promulgation Gaussian filter. The BER 
performance of GMSK with coherent detection under AWGN conditions is given by 


ež] (9.63) 


where B is a degradation factor due to premodulation filter, В = 1 corresponds 
to the performance for MSK. 


e = егіс 


The BER under flat Rayleigh fading conditions is given as 


P,=1 1 (9.64) 
1+ 1 
BUEN, )avg 


where (Ep/No)avg represents an average value 


Table 9.3 shows relationship between the bandwidth of the premodulation 
Gaussian filter normalized by bit rate (ВТ), the 99.99% bandwidth normalized 
by a bit duration, and В. 


Example 9.4 

The GMSK modulation is used in the GSM system with a channel bandwidth of 
200 kHz and a data rate of 270.8 kbps. Calculate (а) the frequency shift between 
binary 1 and binary 0, (b) the transmitted frequencies if the carrier frequency is 
900 MHz, and (c) the bandwidth efficiency in bps/Hz. 
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Table 9.3 BT, versus [3 for GMSK modulation. 


BT, 99.99% bandwidth p 

0.20 1.22 0.76 
0.25 1.37 0.84 
0.30 1.41 0.89 
0.40 1.80 0.94 
0.50 2.08 0.97 


Solution 
(a) The frequency shift is 


Af = fy — f, = 0.56 = 0.5 х 270.83kHz = 135.415kHz 
(b) The maximum and minimum frequency are: 


fy = fe + 0.25R = 900 MHz + 67.707kHz = 900.0677 MHz, 


and 
f = fe – 0.25К = 900 MHz — 67.707 kHz = 899.9323 MHz 
(c) 
: : — R _ 270.83 . 
Bandwidth efficiency B. 200 1.35 bps/Hz 
Example 9.5 


Determine the 3-dB bandwidth for a Gaussian low-pass filter that is used to 
generate 0.30 GMSK with a channel data rate of 270 kbps. What is the 99.99% 
power bandwidth in the RF channel? What is the bit error probability for GMSK 
if E,/No = 6dB? 


Solution 


2 ОЗ OS un 
B T 375105 81.08 kHz 


272 9 Modulation Schemes 


The 3-dB bandwidth is 81.08 kHz. To determine the 99.99% power band- 
width, we use Table 9.3 to find that 1.41 К is the required value. The occupied RF 
spectrum for a 99.99% power bandwidth will be RF bandwidth = 1.41 R = 1.41 
x 270 x 10? = 380.7 kHz, В = 0.89. For Ep/No = 6dB (3.9811), we get 


Р, = erfe| 2B- xd |- егіс (2.662) = 11.5 х 10-5 
0 


9.4 Quadrature Amplitude Modulation 
By allowing the amplitude to vary with phase, a modulation scheme referred to 
quadrature amplitude modulation (QAM) is obtained [1]. Figure 9.12 shows a 
constellation diagram of 16-QAM. The constellation consists of a square lattice 
of signal points. 

The distance d between constellation points can be expressed as 


d=a(2i-K+1)+ 42) -K+1)i,j=0,1,2,... K-1 
К=УМ M=4,16, 64,256,... 


Average symbol error probability under AWGN conditions is given as: 


Р, = %,Q(§) (9.65) 
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Figure 9.12 16-QAM constellation. 
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where: 
7, = average number of immediate neighbors 


pac, 0 
A? = the average power 


7, and A? are given as: 


and K/2—1 
4К2У (2p 1p 
р= 0 


M 


А? = 


For 16-QAM, М = 16 and K = 4: 


Lll — 2)? + = 2) + 
z 44 2) =e )+8 _, 


1 
1622У (2p + 1) 


re ced 24 E 1601139 = 10a? 
Р, = so Æ] = 3Q aK 39 TON, 
Since E, = 4Ep: 


The disadvantage of 16- QAM compared to 16-PSK is that the signal amplitude 
has an inherent variation, regardless of filtering. This may cause problems in 
nonlinear amplifiers and on fading channels. 


Example 9.6 


A modulator transmits symbols at a rate of 19,200 symbols per second. Each 
symbol has 64 different possible states. What is the bit rate? 
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Solution 
Number of bits per symbol: b = log; M = log264 = 10922 = 6 
Bit rate of the modulator = 6 X 19,200 = 115.2kbps 


Example 9.7 

A data stream with data rate Rẹ = 144 Mbps is transmitted on an RF channel 
with a bandwidth of 36 MHz. Assuming Nyquist filtering and Gaussian channel, 
determine the modulation scheme that should be used. If the probability of bit 
error is 3 X 107°, find the required E,/No. 


Solution 
144 


Required spectral efficiency — ae 4 bps/Hz 


Since the channel is bandwidth limited 


us 
3 4 = log, M 


SM =2% = 16 


16-QAM (see Equation 9.66) should be used as it is more efficient than 16-PSK 
(see Equation 9.50). 

For a rectangular constellation (see Figure 9.12), with a Gaussian channel 
and matched filter reception, the bit error probability is given as: 


4 Ep 
5 N, 


-Es = 19,5 = 12.94В 
No 


=3 х 105° 


_ 3 
Epo ae 


Example 9.8 
Compare the performance of 16-PSK with 16-QAM for a BER probability of 107%. 


Solution 
16-PSK (Equation 9.50): 


E 
-8-1 b 
10 Lolo.ss2 | 


.E 


~. Lb = 20dB 
No 


9.5 M-ary Frequency Shift Keying 275 


16-QAM (Equation 9.66): 


8 3 
107% = 39 


Thus, 16-QAM has an advantage of about 4dB compared to 16-PSK. 


9.5 M-ary Frequency Shift Keying 

The PSK and various forms of QPSK do not have a continuous phase, but they provide 
good bandwidth efficiency to allow more users for a given channel bandwidth [11]. If 
there is an interest in using low-cost amplifiers that are essentially nonlinear, we need 
constant-envelope modulation schemes. The frequency shift keying (FSK) modulation 
is one such schemes. In binary FSK, the carrier frequency is increased or decreased by 
a fixed value corresponding to a binary 1 or 0. Thus, two separate signals are trans- 
mitted. The FSK signals can be detected coherently or noncoherently. The bit error 
probability P, for a coherent binary FSK in the AWGN channel is given as: 


E, 


2N, 


Р, = 1 erfc 


7 (9.67) 


This is 3dB worse than the coherent BPSK. For noncoherent systems the P, is: 
e P/ON) (9.68) 


As the frequency hopping spread spectrum (FHSS) uses orthogonal fre- 
quency division multiplexing (OFDM) with MFSK, we provide a brief description 
of MFSK. In MFSK, signal s;(t) at frequency f; is given as 


s(t) = |E -cos(2mf]) ^ 1sisM (9.69) 
where: 
f,-f,*Qi-1- M)Af 
in which 


f, = carrier frequency 
Af — frequency step 

M - number of different signal elements — 2^ 
b — number of bits per signal element 
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Е, = energy per symbol = Ejlog;M 
E, = energy per bit 

Т; = symbol duration = bTp 

Т, = bit duration 

Rp = data rate 

B,, = bandwidth 

No = noise density 


* Total bandwidth required, B,, = 2MAf 
e Minimum frequency separation required = 2Af —1/T; 


Average probability of symbol error Р, for the coherent orthogonal MFSK 
signal is given as: 


Р,<(М-1)О M>2 (9.70) 


No 


E,,log,M | 


Average probability of symbol error P, for the noncoherent orthogonal 
MFSK signal is given as: 


M 
_ 1 -E IN, А E,/(iN, 
„= pa ya её) M>2 (9.71) 
where: 
(- Lá 
1 i| (M — i)! 


The upper-bound of P, for the orthogonal and noncoherent orthogonal 
MFSK signal is 


ps EI e Fs!(2No) M2 (9.72) 


The relationship between bit error probability Р, and Р; for the orthogonal 
MFSK signal set is given as 


ez 2571 . MD M»2 (9.73) 


liz |25) = (9.74) 
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The channel bandwidth efficiency of a coherent MFSK is 


R, _ 2log2M 


B, (M+3) 


M>2 (9.75) 


The channel bandwidth efficiency of a noncoherent MFSK is 


M>2 (9.76) 


The bandwidth efficiency of an MFSK decreases with increasing M, MFSK 
signals are bandwidth inefficient. However, since all the M signals are orthogonal 
there is no crowding in the signal space and hence the power efficiency increases 
with M. MFSK can use nonlinear amplifiers with no performance degradation. 


Example 9.9 

If M = 8, f. = 250kHz, Af = 25kHz, what is the total bandwidth required? 
What is the bandwidth efficiency? What is the E,/No required for symbol bit 
error probability = 107% of a coherent MFSK? How many bits per symbol are 
carried? 


Solution 
Total bandwidth required = 2MAf = 2 х 8 X 25kHz = 400kHz 


R 2log; M 
BEAD ВМ 2x3 _ 
un B. (M3) i1 0.5455 


10-6 = (М – 1) Qz) = 7О(@) 


z ~ 5.08 
EjlogoM _ 
UNE. = 5.08 
Ey = (5:08 Z 9 346 dB 
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Figure 9.13 Modulation method selection. 


9.6 Modulation Selection 

Proper selection of a modulation scheme in mobile communications is needed. 
Several factors dictate the selection. In general a modulation method should have 
the following characteristics: 


* spectrally efficient (i.e., higher bps/Hz); 


applicable to cellular/PCS in all environments (urban, suburban, rural); 


* easy to implement; 


low adjacent-channel interference. 
* good BER performance 
As shown in Figure 9.13, transmission quality and spectral efficiency of a 


modulation method are interrelated. Table 9.4 lists the modulation schemes and 
their spectral efficiencies used in different mobile systems. 


9.7 Synchronization 

The demodulation of a signal requires that the receiver be synchronized with the 
transmitter signal as it is received at the input of the receiver [11]. The synchro- 
nization must be for: 


* Carrier synchronization. The receiver is on the same frequency as the trans- 
mitted signal, adjusted for the effects of Doppler shifts. 

* Bit synchronization. The receiver is aligned with the beginning and end of 
each bit interval. 

* Word synchronization (also known as frame synchronization). The receiver 
is aligned with the beginning and end of each word in the transmitted signal. 
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Table 9.4 Modulation methods in mobile communication. 


Information rate Channel spacing Spectral 
System Modulation scheme (kbps) (kHz) efficiency(bps/Hz) 
15-136 т/4-РОР5К 48.6 30 1.62 
PDC m/4-DOPSK 42.0 25 1.68 
GSM GMSK 270.8 200 1.35 
CT-2 GMSK 72 100 0.72 
DECT GMSK 1572 1728 0.67 
(BT, = 0.5) 
CDMA OPSK 1228.8 1230 0.99 
UWC-136 16-OAM 384 1600 4.17 


Divide by N cos wt (/) 


Narrowband 


Multiply Phase- 
By N Locked 


Loop 


Received 
Signal qi 


Figure 9.14 Carrier recovery for PSK. 


If the synchronization in the receiver is not precise for any of these opera- 
tions, then the BER of the receiver will not be the same as described by equations 
in previous sections of this chapter. The design of a receiver is an area for which 
standards are traditionally not specified. It is an art that enables one manufac- 
turer to offer better performance in its equipment compared to a competitor. The 
methods of achieving the synchronization discussed are the traditional methods. 
A particular receiver may or may not use any of these methods, and proprietary 
methods are often used by many manufacturers. 

For PSK, the carrier signal changes phase every bit interval (see Figure 9.14). 
If we multiply the received signal by an integer, N, we can convert all of the phase 
changes in the multiplied signal to multiples of 360°. The new signal then has 
no phase changes and we can recover it using a narrowband phase-locked loop 
(PLL). After the PLL recovers the multiplied carrier signal, it is divided by N to 
recover the carrier at the proper-frequency. By a suitable choice of digital dividing 
circuits, it is possible to get a precise 90° difference in the output of two dividers 
and thus generate both the cos o£ and sin wt signals needed by the receiver. There 
are also some down-converter integrated circuits that have a precise phase shift 
network contained within them. The carrier recovery is typically performed at 
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some lower intermediate frequency rather than directly at the received frequency. 
For BPSK we would need an N of 2, but an N of 4 would be used to enable the 
sine and cosine terms to be generated. For QPSK and its derivatives, an N of 4 is 
necessary; for 7/4-DQPSK an N of 8 would be needed. 

After we recover the carrier, we must reestablish the carrier phase to deter- 
mine the values of the received bits. Somewhere in the transmitted signal must be 
a known bit pattern that we can use to determine the carrier phase. The bit pat- 
tern can be alternating Os and 1s that we use to determine bit timing or it could 
be some other known pattern. 

The advantage of differential keying (e.g., 7/4-DQPSK) is that it is not 
important to know the absolute carrier phase. Only the change in carrier phase 
from one symbol to the next is important. 

MSK is a form of frequency modulation; therefore, a different method of 
carrier recovery is required. In Figure 9.15, the MSK signal has frequency f and 
deviation Af = 1/2T;. We first multiply the signal by 2, thus doubling the devia- 
tion and generating strong frequency components at 2f + 2Af and 2f — 2Af. We 
use two PLLs to recover these two signals. 


5100) = соѕ(2т + mAft) (9.77) 
5,00) = cos(2nft — mAft) (9.78) 


We then take the sum and difference of s(t) and s2(t) to generate the desired I(t) 
and O(t) signals. 


I(t) = s,(t) + 5,00) = 2cos2mftcosmAft (9.79) 
ОФ = 5100) — 5,00) = 2sinZaftsinmft (9.80) 


The identical circuit can also be used for carrier recovery for а GMSK system. 


r(t) 
f+ Aff2, f — Af/2 
Multiply by 2 


Q(t) 


Figure 9.15 Carrier recovery for MSK. 
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The next step is to recover data timing or bit synchronization (Figure 9.16). 
Most communications systems transmit a sequence of 1s and 0 in an alternating 
pattern to enable the receiver to maintain bit synchronization. A PLL operating 
at bit timing is used to maintain timing. Once the PLL is synchronized on the 
received 101010 ... pattern, it will remain synchronized on any other patterns 
except for long sequences of all Os or all 1s. 

MSK uses an additional circuit to achieve bit timing. The $1(ї) and s2(t) 
signals are multiplied together and low-pass filtered (Figure 9.17). 


s (ÐS (t) = cos(2aft + mAft) X cos(2mft — mft) 
= 0.5 cos4mft + 0.5 cos2mAft (9.81) 


low — pass filtered [s,(0s,(] = 0.5 cos2mAft — 0.5 cos (9.82) 
b 


The output of a low-pass filter is a clock signal at one-half of the transmitted 
bit rate. The one-half bit rate clock is the correct rate for demodulation of the 
signal since the I and O signals are at one-half of the bit rate. 

Frame synchronization is determined by the receiver correlating the received 
signal with a known bit pattern. The receiver performs an autocorrelation function 


Received signal Matched Kt) 
r(t) Filter > or 
Detector Q(t) 


Differentiator 


Figure 9.16 Generalized data timing recover circuit. 
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Figure 9.17 MSK data timing recovery circuit. 
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Figure 9.18 Generalized framing recovery circuit. 


to determine when the bit pattern is received and then outputs a framing pulse 
(Figure 9.18). 


9.8 Equalization 

The received signal in a mobile radio environment travels from the transmitter 
to the receiver over many paths [7]. The signal fades in and out and undergoes 
distortion because of the multipath nature of the channel. For a transmitted signal 
s(t) = a(t)cos[wt + 0(2)], we can represent the received signal, r(t), as: 


rt) p = 1,)a(t — 1,)cos[ w(t — 7, + O(t — т,)] 
Tyft— caf sin| w(t — т;) + 9(t — 7;] (9.83) 


We know that the received signal has Rayleigh fading statistics. But what are 
the characteristics of the x;(t) and у) term in Equation 9.83? If the transmitter 
signal is narrow enough compared to the multipath structure of the channel, then 
the individual fading components, x;(t) and y;(t) will also have Rayleigh statistics. 
If a particular path is dominated by a reflection off a mountain, hill, building, 
or similar structure, then the statistics of that path may be Rician rather than 
Rayleigh. If the 7; (delay spread) is small compared to the bit interval, then a little 
distortion of the received signal occurs. If the v; is greater than the bit interval, 
then the transmissions from one bit will interfere with transmissions of another 
bit, resulting in inter-symbol interference (ISI). 

Spread spectrum systems use wide bandwidth signals and attempt to recover 
the signals in each of the paths and add them together in a diversity (Rake) receiver. 
For our discussion here, however, we are transmitting narrowband signals, and the 
multipath signals are an interference to the desired signal. We need a receiver that 
removes the effects of the multipath signal or cancels the undesired multipath. 
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Another way to describe the multipath channel is to describe the channel as 
having an impulse response h(t). The received signal is then written as: 


ко = | хере = тат (9.84) 


— 0 


We can recover s(t) if we can determine a transfer function Р ! (t) (the inverse of 
h(t)). One reason it is difficult to perform the inverse function is that it is time varying. 
The circuit that performs the inverse function is called an equalizer (see Figure 9.19). 

Generally, we are interested in minimizing the ISI at the same time we do 
our detection (the sample time in a sample-and-hold circuit). Thus, we can model 
the equalizer as a series of equal time delays (rather than random as is the general 
case) with the shortest delay interval being a bit interval. We then construct a 
receiver that determines req(t), the equalized signal: 


n 


f 2 ог = t,t ти) (9.85) 


We use the equalized signal req(t) as the input to our detector to determine 
the value of the ith transmitted bit. We must adjust the values of a; to achieve 
some measure of receiver performance. A typical measure is to minimize the mean 
square error between the value of the detected bit at the output of the adder and 
the output of the detector. Other measures for equalizers are possible. 


1-bit 1-bit 1-bit š 1-bit 
delay delay delay delay 


| | detected bit 
4 HOW 209 — 9 7 
=} 


a, to ith tap Tap Gain Adjustment 


Figure 9.19 Block diagram of an equalizer. 
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9.9 Summary 
In this chapter we studied the modulation and demodulation process applicable 
to cellular systems. Since baseband signals can be transmitted only over short 
distances with wires and require very long antennas to transmit them without 
wires, the baseband signals are modulated onto radio frequency carriers. We stud- 
ied phase modulation and its derivatives 7/4-QPSK, 7/4-DQPSK, and OQPSK. 
We discussed MSK, a form of FM, as a first step toward GMSK which is used 
for DECT and GSM. Based on the literature, the error performance for GMSK 
also has the same-shaped curve as ASK with the proper definition of a correct- 
ing factor В. For GSM, where BT; = 0.3, В ~ 0.9; for DECT, where BT; = 0.5, 
В ~ 0.97. 

We also studied а hybrid of amplitude and phase modulation, called QAM. 
We discussed the signal constellation and the bit error rate. Finally, we concluded 
the chapter by providing brief descriptions of the synchronization and equaliza- 
tion processes. 


Problems 
9.1 A digital signaling system is required to operate at 9.6 kbps. If a signal 
element encodes a 4-bit word, what is the minimum bandwidth of the 
channel? 


9.2 Given a channel with intended capacity of 20 Mbps, the bandwidth 
of the channel is 3 MHz. What is the signal-to-noise ratio required to 
achieve this capacity? 


9.3 The receiver in a communications system has a received signal power of 
—134 dBm, a received noise power spectral density of —174 dBm/Hz, 
and a bandwidth of 2000 Hz. What is the maximum rate of error-free 
information for the system? 


9.4 Find the minimum required bandwidth for the baseband transmission 
of an 8-level PAM pulse sequence having a data rate, Къ, of 9600 bps. 
The system characteristics consist of a raised-cosine spectrum with 50% 
excess bandwidth. 


9.5 Assuming that фо = 0°, a bit stream 101100 is sent using a 7/4-DPQSK 
modulation scheme. The leftmost bits are first applied to the transmitter. 
Determine phase cg, and the values of I; and О» during transmission. 


9.6 Find the BER probability, Pe, of an M-PSK system for a 14.4 kbps signal. 
Amplitude is 15 mW, and noise density, No, is 107? W/Hz. 


9.7 Anoncoherent orthogonal M-FSK system carries 3 bits per symbol. The 
system is designed for Ep/No = 6 dB. What is the maximum bit error rate 
probability? Find the bandwidth efficiency of the system. 
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9.8 А noncoherent orthogonal M-FSK system carries 4 bits per symbol. The 
system is designed to have a maximum probability of symbol-error of 
107%. What is the required Ej/No? What is the bandwidth efficiency? 
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CHAPTER 10 


Antennas, Diversity, and 
Link Analysis 


10.1 Introduction 

The antenna system used for any radio communication platform is one of the 
critical and least understood parts of the system. The antenna system is the interface 
between the radio system and the external environment. Wireless communication 
systems require antennas at the transmitter and receiver to operate properly. The 
design and deployment of antennas can make or break a wireless system, and 
many poorly performing systems can be traced to improperly installed or placed 
antennas. 

The antenna system can consist of a single antenna at the base station and 
one at the mobile station. Primarily the antenna is employed by the base station 
and the mobile for establishing and maintaining the communication link. There 
are many types of antennas available, all of which perform specific functions 
depending on the application at hand. The type of antenna used by a system 
operator can be colinear, folded dipole, or Yagi, to mention a few [2,8—9]. 

In this chapter we first define and discuss the roles of antennas. We then 
examine the interrelationships between antenna beam width, directivity, and gain. 
After completing our discussion of antennas we explore the concepts of diversity 
reception where multiple signals are combined to improve the signal-to-noise ratio 
(SNR) of the system [3,10-13,16]. We describe the noise that a receiver sees and 
use the concept to perform an analysis of the link between the base station and the 
mobile station and calculate the SNR at the receiver. Throughout the chapter, we 
present numerical examples to improve the understanding of each topic. 


10.2 Antenna System 


The radio communication system requires a reliable communication between a 
fixed base station and a mobile station. The goal of the system designer is to have 
the same performance in both the transmitting and receiving directions. This is 
not always possible since the base station typically has a higher output power 
than the mobile station. Also, the mobile station antenna is typically on the street 
at a height of 1 to 2m compared to the base station antenna height of 50 to 60m. 
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This results in the mobile receiver having a high noise level due to interference 
caused by the ignitions of nearby vehicles or other objects, whereas the base sta- 
tion, with its higher antenna, usually sees a quieter radio environment. These 
factors can combine to favor one particular direction over the other. The wireless 
system designer must carefully consider all these factors or the range of the system 
may be limited by poor performance in one direction. 

The types of antennas, their gain and coverage patterns, the available power 
to drive them, the use of simple or multiple antenna configurations, and the polar- 
ization (the polarization of a radio wave is the orientation of its electric field 
vector) are the major factors that can be controlled by the system designer. The 
system designer has no control over the topography between the base station and 
mobile station antennas, the speed and direction of the mobile station, and the 
location of antenna(s) on the mobile station. Each of these factors significantly 
affects system performance. Sometimes the placement of the mobile antenna can 
severely limit system performance. While the mobile antenna is usually installed 
by a knowledgeable technician, the owner of the vehicle may force a nonoptimum 
placement of the antenna. Furthermore, cellular antennas are vertically polarized 
physically, but many vehicle antennas are no longer vertical after the vehicle is 
sent through a car wash. 

Along with the type of antenna there is the relative pattern of the antenna, 
indicating in which direction the energy emitted or received will be directed. There 
are two primary classifications of antennas: omnidirectional and sectorized (direc- 
tional). The omnidirectional antennas are used when the desire is to have a 360° 
radiation pattern. The sectorized antennas are used when a more refined pattern 
is needed. The directional pattern is usually required to facilitate system growth 
through frequency reuse. 

The choice of antenna directly impacts the performance of both the base 
station and the overall network. The antenna selection must consider a number 
of design issues. Some involve the antenna gain, the antenna pattern, the inter- 
face or matching to the transmitter, the receiver used for the site, the bandwidth 
and frequency range over which the signals will travel, and the power handling 
capabilities. 


10.3 Antenna Gain 


The task of a transmitting antenna is to convert the electrical energy travelling 
along a transmission path into electromagnetic waves in space. The antennas are 
passive devices, the power radiated by the transmitting antenna cannot be greater 
than the power entering from the transmitter. It is always less because of losses. 
Antenna gain in one direction results from a concentration of power in that direc- 
tion and is accompanied by a loss in other directions. Antenna gain [7] is the most 
important parameter in the design of an antenna system. A high gain is achieved 
by increasing the aperture area, A, of the antenna. Antennas obey reciprocity; the 
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transmit gain and receive gain are the same, and the antenna can be analyzed by 
examining it as either a receive or transmit antenna. The amount of power cap- 
tured by an antenna is given as: 


P=pA (10.1) 


where: 
p = power density (power per unit area) 
A — aperture area 


Antenna gain can be defined either with respect to an isotropic antenna or 
with respect to a half-wave dipole and is usually analyzed as a transmit antenna. 
An isotropic antenna is an idealized system that radiates equally in all directions. 
The half-wave dipole antenna is a simple, practical antenna which is in com- 
mon use. 

The gain of an antenna in a given direction is the ratio of power density 
produced by it in that direction divided by the power density that would be 
produced by an isotropic antenna. The term dBi is used to refer to the antenna 
gain with respect to the isotropic antenna. The term dBd is used to refer to the 
antenna gain with respect to а half-wave dipole (0dBd = 2.1dBi). While most 
analyses of system performance use a half-wave dipole as the reference, many 
times antenna gain figures are quoted in dBi to give a falsely inflated gain figure. 
The system designer must carefully read data sheets on antennas to use the correct 
gain figure. As a rule of thumb, if the gain is not quoted in either dBd or dBi, the 
gain is in dBi, with the dBi left out to inflate the gain figures. 

For an isotropic antenna in free space, the received power density is 
given as 


(10.2a) 


where: 
Рт = transmitter power 
рк = receiver power density 
d — distance between transmitter and receiver 


When a directional transmitting antenna with power gain factor, Ст, is used, 
the power density at the receiver antenna is Ст times Equation 10.2a, i.e., 


Pa = Gr, (10.2b) 
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The amount of power captured by the receiver is pr times the aperture area, Ар, 
of the receiving antenna. The aperture area is related to the gain of the receiving 
antenna by 


4тАк 


Gg = \2 


(10.3) 


where: 
х = © 
f 


f = the transmission frequency in Hz 

c = 3 X 10? m/s is the free-space speed of propagation for electromagnetic 
waves 

Ар = the effective area of aperture, which is less than the physical area by an 
efficiency factor pg; typical value for pr ranges from 60 to 80% 


The total received power, Рр is given as: 
Рр = ARPR (10.4) 


Substituting the value of Рк and Ag from Equations 10.2b and 10.3 into 
Equation 10.4, together with the transmitting antenna gain Ст, we get 


-|à P 
PR = là jl РтСтСк (10.5) 


Equation 10.5 includes the power loss only from the spreading of the 
transmitted wave. If other losses are also present, such as atmospheric absorp- 
tion or ohm losses of the waveguides leading to antennas, Equation 10.5 can be 
modified as [4]: 


PR A2 GrGr 

poles n (10.6) 
Pr _ СтСк 
PRO mm (10.7) 


2 : ; Я j 
Lp = ЕЗ denotes the loss associated with propagation of electromagnetic 


waves from the transmitter to the receiver as discussed in Chapter 3. 


Lp depends on carrier frequency and separation distance d. This loss is always 
present. Lo is the loss factor for additional losses. 
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When we express Equation 10.7 in terms of decibels, we get 


Px = 20log |->] + Pr + Gr + Gr — Lo dB (10.8) 


The product РтСт is called the effective isotropic radiated power (EIRP) and 


term 201og >] refers to free space patb loss (L5) in dB. Another term, effective 
TT 

radiated power (ERP), is also used. It is the power input multiplied by the antenna 

gain measured with respect to a half-wave dipole antenna. The EIRP is related to 


ERP as 
EIRP = ERP + 2.14 dB (10.9) 


In the free space, the path between two antennas has no obstruction (see 
Figure 10.1) and there is no object where reflection can occur. Thus, the received 
signal is composed of only one component. When the two antennas are located 
on the earth, then there are multiple paths from the transmitter to the receiver. 
The effect of multiple paths is to change the path loss between two points. The 
simplest case occurs when the antenna heights Рт and Рр are small compared to 
their separation distance d and the reflecting earth surface is assumed to be flat 
(see Chapter 3). The received signal can then be represented by a field that is 
approximated by a combination of a direct wave and a reflected wave as shown 
in Figure 10.2. In this case the received power, Pr, and transmitted power, Рт, are 
related as (see Chapter 3 and Appendix B for derivation): 


PR 


Pr 


hrhr 
a 


2 Сабк 
Lo 


(10.10) 


Transmitting Receiving 


Figure 10.1 Free-space path-loss model. 
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Figure 10.2 Path-loss model with reflection. 


Expressing Equation 10.9 in decibels, we get 


bpbg 
d? 


Pr = 20log + Pr + Gr + Gg — Lo dB (10.11) 


comparing it with Equation 10.8 we note that Equation 10.10 is independent of 
transmitting frequency. 


Example 10.1 

We consider a communication system in which the distance between the trans- 
mitter and receiver is 10,000 m. The transmitter EIRP is 30dBW (Gr = 20 dBi; 
Рт = 10dBW). The transmitting frequency is 1.5 GHz (A = 0.2 т). The receiver 
antenna gain is 3 dBi; and total system losses are 6 dB. Assuming the receiver noise 
figure, N; — 5dB and bandwidth, B,, — 1.25 MHz, calculate the received signal 
power at the receiver antenna and the SNR of the received signal. Neglect any 
feed line losses between the antenna and receiver. 


Solution 


= —116dB 


Lp: free-space loss = 201ов осо) E 


Pr = —116 + 30 + 3 – 6 = —89dBW = -59 dBm 


Noise power, Py = Nf Bw No 
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Noise Density, No = kT = log (1.38 x 10723 x 290) = —204dBW = —174dBm 


Py = 5 — 174 + 10log(1.25 x 106) = —108 dBm 


SNR = РК = —59 — (-108) = 49dB 
Ру 


Ехатріе 10.2 

Using the data in Example 10.1 and antenna heights at the receiver and transmitter 
units to be 40m and 2m, respectively, calculate the received signal power at the 
receiver antenna and the SNR of the received signal. 


Solution 


Path loss = 20 log 


40 x 2 
= —122dB 
шо | 


Pr = —122 + 30 + 3 – 6 = —95dBW = —65dBm 


Ру = – 108 dBm (from Example 10.1) 


е 265 = (2108) = 43 dB 
PN 


10.4 Performance Criteria of Antenna Systems 
The performance of an antenna system [7,19] is not restricted to its gain and 
physical attributes. There are many other parameters that must be considered in 
evaluating antenna performance. The parameters that define the performance of 
an antenna system are: 

* Antenna pattern 

* Main and side lobe 

* Radiation efficiency (1) 

* Antenna bandwidth 

* Horizontal beam width 

* Vertical beam width 

* Gain (G) 

* Directivity (D) 

* Antenna polarization 

* [nput impedance 
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Front-to-back ratio (Rpp) 
e Front-to-side ratio (К) 


Power dissipation 


Intermodulation 


* Construction 
e Cost 


The antenna pattern chosen should match the coverage requirements for 
the base station. An antenna has one major lobe and a number of side lobes 
(see Figure 10.3). The side lobes are important because they create potential 
problems by generating interference. Ideally there should be no side lobes for the 
antenna pattern. For down tilting, the side lobes are important because they can 
create secondary sources of interference. 

The radiation efficiency is a ratio of total power radiated by an antenna to 
net power accepted by an antenna from the transmitter. The bandwidth defines 
the operating range of the frequencies for the antenna. It is the angular separation 
between two directions in which radiation interest is identical. The half power 
point for the beam width is the angular separation where there is 3 dB reduction 
off the main lobe. Normally, the wider the beam width, the lower the gain of the 
antenna. The gain is the ratio of the radiation intensity in a given direction to that 
of an isotropically radiated signal. The directivity is the gain calculated assuming 
a lossless antenna. Real antennas have losses, gain is the directivity multiplied by 
the efficiency of the antenna. 

Polarization is important for an antenna because wireless mobile systems 
use vertical polarization. A vertical antenna is easiest to mount on a vehicle; there- 
fore vertical polarization has been standardized. In general, horizontal or vertical 
polarization will work equally well. 

Most cables used as feed line from the transmitter/receiver to the antenna 
are either 50 or 72/75 ohms. If the input impedance of the antenna is far removed 
from either of these values, it will be difficult to get an antenna to accept the 
power delivered to it and its radian efficiency will be low. 

The front to back ratio is a ratio in respect to how much energy is directed 
in the exact opposite direction of the main lobe of the antenna (see Figure 10.3). 
The front to side ratio is a ratio in respect to how much energy is directed in the 
side lobes of the main lobe of the antenna (see Figure 10.3). 

The power dissipation is a measure of the total power the antenna can accept 
at its input terminals. The antenna chosen should be able to handle the maximum 
envisioned power load without any problem. The amount of intermodulation 
which the antenna introduces to the network in the presence of strong signals 
as referenced from manufacturer should be considered in antenna selection. 
The construction attributes are associated with physical dimensions, mounting 
requirements, material used, wind loading, and connectors. 
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Side Lobe 


Major Lobe 


Back Lobe 


180* 


Figure 10.3 Radiation pattern of an antenna. 


10.5 Relationship between Directivity, Gain, and Beam 
Width of an Antenna 


Real antennas are not isotropic radiators but have a pattern of more and less 
power in different directions. The antenna engineer considers the pattern of the 
power radiated in the horizontal and vertical directions. The shape of the pattern 
describes the directionality of the antenna. The direction for maximum power 
is referred to as the primary beam or main lobe, whereas secondary beams are 
called the minor lobes (back and side lobes), see Figure 10.3 [7]. The pattern of 
the antenna has two desired effects: concentration of the power in a desired direc- 
tion to improve the signal strength at the receiver and weakening the power in an 
undesired direction to reduce interference from or to other receivers. Thus, the 
minor lobes give undesired radiation or reception. Since the major lobe propa- 
gates and receives the most energy, this lobe is called the front lobe. Lobes adja- 
cent to the front lobe are the side lobes and the lobe exactly opposite to the front 
lobe is called the back lobe. The front-to-back ratio of an antenna is defined as: 


Кєз = 10log Рт (10.12) 


where: 
PmF = maximum power density of the front lobe 
Ртв = Maximum power density of the back lobe 
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One-half Wavelength 


Balanced feed line 


Figure 10.4 Half-wave dipole antenna. 
The front-to-side ratio of an antenna is given as: 


К = 10log = (10.13) 


where: 
Pms = Maximum power density of the side lobe 


The half-wave dipole antenna has two parts (see Figure 10.4). The half-wave 
length is handy for impedance matching. Since the dipole antenna is the simplest 
one to build, it is often used as the reference to describe the gain of other anten- 
nas. The average power density for the dipole vertical antenna is given as: 


Pave = = (sino) (10.14) 


In Equation 10.14 it should be noticed that power density at any point 
depends on the direction Ө and distance d from the dipole. Since there is no depen- 
dence on 6, the antenna pattern is directional in x-z and y-z planes, but omnidi- 
rectional in the x-y plane. 

A dipole mounted in a vertical direction provides an omnidirectional pattern 
that is useful for the base station antenna of cellular systems. While dipoles are 
often used as simple antennas, in real systems other types of antennas are used to 
provide higher gain than a dipole antenna. 


10.5.1 The Relationship between Directivity and Gain 
The directivity of an antenna is the ratio of the maximum power density from the 
antenna and power density from an isotropic antenna 


p = P (10.15) 
Pr 


4nd? 
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where: 
|P |max = maximum power density from the antenna 
Pr = transmitted power of an isotropic antenna 


The gain of an antenna is the ratio of maximum power density from the 
antenna and input power density if the antenna is isotropic. 


Go ти _ (10.16a) 
m] [es 
4nd? 4nd? -q 
Using Equation 10.15 in Equation 10.16a, we get: 
G=7xD (10.16b) 
where: 
1 = efficiency of the antenna 
Ру = input power of an isotropic antenna 
10.5.2 Relation between Gain and Beam Width 
The receiver gain Gg can be related to its half-power beam width as [7]: 
_ Ar 
Gr (10.17) 


— Oupbup 


where: 
Өнр and фнр аге the half-power beam widths in the Ө and ф planes 


The factor 47 is the solid angle subtended by a sphere in steradians (square radians) 


4n steradians = 4q X ү, = 41,250 degree* = solid angle in a sphere 


Ск = 41250 (10.18) 


Өнрфнр 


For an ideal gain antenna, where power density is uniform inside the 3-dB 
beam width (for both Ө and ф) and zero outside the 3-dB beam width, the gain 
Gr can be expressed as: 


41,250 
Gg = Фф 


(10.19) 
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where: 
0 and ¢ are in degrees 


For a real antenna with side lobes, the gain should be calculated using 


Equation 10.20, which includes the effect of side lobes. 


32,400 
Gg — Өф 


(10.20) 


If an antenna is designed with a circular pattern іп one direction, i.e., a linear 
element is used, the approximate gain can be obtained for the vertical 3-dB beam 
width from Equation 10.19 as: 


41,2 
Gp ~ 21259 _ 114.6 


| 360x080 9 (10.21) 


The corresponding gain equation for a linear element including side lobes is 
given as [7]: 


Gg = 1015 (10.22) 


10.5.3 Helical Antennas 

Helical antennas provide circular polarized waves in the same direction as that of 
the helix. A helical antenna can be used to receive circular polarized waves and 
also receive plane polarized waves with the polarization in any direction. Helical 
antennas are often used with VHF and UHF satellite transmissions. The gain of 
a helical antenna is proportional to the number of turns (N). An approximate 
expression for the gain with respect to an isotropic antenna is given as [7]: 


_ 15№8(трн) 


G ЧЕ 


(10.23) 


where: 
G = antenna gain in dB 
N = number of turns in the helix, N > 3 
S = turn spacing in meters, S = 
Dy = diameter of helix in meters, Dy = А 


№ = wave length in meters. 
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The radian pattern for this antenna type has one major lobe and several minor 
lobes. For the major lobe, the 3 dB beam width (in degrees) is approximately: 


52n, [N 
$e Ae CS (10.24) 


Example 10.3 

We consider an antenna in which 12 W of power results in 3 W of power being 
dissipated as resistive losses in the antenna and the rest radiated by the antenna. 
If the directivity of the antenna is 7 dB (i.e., 5), what is its gain? 


Solution 


ML 
т 12 0.75 


G = nD = 0.75 X 5 = 3.75 (5.74 dB) 


Example 10.4 
What is the 3-dB beam width of a linear element antenna with a gain of 12 dBi? 


Solution 


101.5 _ 4o 


Example 10.5 
Consider a helical antenna, which has 12 turns and is designed for a frequency of 
1.8 GHz. 
a. calculate the optimum diameter (D jj), spacing (5) for the antenna and total 
length of the antenna, 
b. calculate the antenna gain, and 
c. calculate the beam width of the antenna. 


Solution 
a. 


f 1800x106 ` 
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L = NS = 12 X 41.7 = 500mm 


b. 
ond М 
G = DNS(Du: m)? _ 15 X 12 X 0.0417 х (т X 0.053) _ 44.92 = 16 cqpi 
"E (0.1667)? 
с. 


SIN [Хх _52х0.1667, | 01667, 
9 = Di VNS ^-x0053 VIZ х 0.0417 30 degrees 


10.6 Diversity 


In Chapter 3, we pointed out that a radio channel is subjected to fading, time- 
dispersion, and other degradations. Diversity techniques are employed to overcome 
these impairments and improve signal quality [6,13,15,20]. The basic concept 
of diversity is that the receiver has more than one version of the transmitted signal 
available, and each version of transmitted signal is received through a distinct 
channel. When several versions of the signal, carrying the same information, 
are received over multiple channels that exhibit independent fading with compa- 
rable strengths, the chances that all the independently faded signal components 
experience the same fading simultaneously are greatly reduced. Suppose the 
probability of having a loss of communications due to fading on one channel is 
p and this probability is independent on all M channels. The probability of losing 
communications on all channels simultaneously is then pM. Thus, a 10% chance 
of losing the signal for one channel is reduced to 0.1? = 0.001 = 0.1% with three 
independently fading channels [5,17]. 

Typically, the diversity receiver is used in the base station instead of the 
mobile station, because the cost of the diversity combiner can be high, especially 
if multiple receivers are necessary. Also, the power output of the mobile station 
is limited by the battery. Handset transmitters usually lower power than mobile- 
mounted transmitters to preserve battery life and reduce radiation into the human 
body. The base station, however, can increase its power output or antenna height 
to improve the coverage to a mobile station. 
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Figure 10.5 Diversity channel model. 


Each of the channels, plus the corresponding receiver circuit, is called a 
branch and the outputs of the channels are processed and routed to the demodu- 
lator by a diversity combiner (see Figure 10.5). 

Two criteria are required to achieve a high degree of improvement from a 
diversity system. First, the fading in individual branches should have low cross- 
correlation. Second, the mean power available from each branch should be almost 
equal. If the cross-correlation is too high, then fades in each branch will occur 
simultaneously. On the other hand, if the branches have low correlation but have 
very different mean powers, then the signal in a weaker branch may not be useful 
even though it has less fades than the other branches. 


10.6.1 Types of Diversity 
The following methods are used to obtain uncorrelated signals for combining: 


1. Space diversity: Two antennas separated physically by a short distance 
d can provide two signals with low correlation between their fades. The 
separation d in general varies with antenna height Р and with frequency. 
The higher the frequency, the closer the two antennas can be to each other. 
Typically, a separation of a few wavelengths is enough to obtain uncor- 
related signals. Taking into account the shadowing effect (see Chapter 3), 
usually a separation of at least 10 carrier wavelengths is required between 
two adjacent antennas. This diversity does not require extra system capac- 
ity; however, the cost is the extra antennas needed. 


2. Frequency diversity: Signals received on two frequencies, separated by 
coherence bandwidth (see Chapter 3) are uncorrelated. To use frequency 
diversity in an urban or suburban environment for cellular and personal 
communications services (PCS) frequencies, the frequency separation must 
be 300kHz or more. This diversity improves link transmission quality at 
the cost of extra frequency bandwidths. 
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. Time diversity: If the identical signals are transmitted in different time slots, 


the received signals will be uncorrelated, provided the time difference between 
time slots is more than the channel coherence time (see Chapter 3). This 
system will work for an environment where the fading occurs independent 
of the movement of the receiver. In a mobile radio environment, the mobile 
unit may be at a standstill at any location that has a weak local mean or is 
caught in a fade. Although fading still occurs even when the mobile is still, 
the time-delayed signals are correlated and time diversity will not reduce the 
fades. In addition to extra system capacity (in terms of transmission time) 
due to the redundant transmission, this diversity introduces a significant 
signal processing delay, especially when the channel coherence time is large. 
In practice, time diversity is more frequently used through bit interleaving, 
forward-error-correction, and automatic retransmission request (ARQ). 


. Polarization diversity: The horizontal and vertical polarization components 


transmitted by two polarized antennas at the base station and received by two 
polarized antennas at the mobile station can provide two uncorrelated fading 
signals. Polarization diversity results in 3dB power reduction at the transmit- 
ting site since the power must be split into two different polarized antennas. 


. Angle diversity: When the operating frequency is =10 GHz, the scattering 


of signals from transmitter to receiver generates received signals from 
different directions that are uncorrelated with each other. Thus, two or 
more directional antennas can be pointed in different directions at the 
receiving site and provide signals for a combiner. This scheme is more 
effective at the mobile station than at the base station since the scattering is 
from local buildings and vegetation and is more pronounced at street level 
than at the height of base station antennas. Angle diversity can be viewed 
as a special case of space diversity since it also requires multiple antennas. 


. Path diversity: In code division multiple access (CDMA) systems, the use 


of direct sequence spread spectrum modulation allows the desired signal to 
be transmitted over a frequency bandwidth much larger than the channel 
coherence bandwidth. The spread spectrum signal can resolve in multipath 
signal components provided the path delays are separated by at least one 
chip period. A Rake receiver can separate the received signal components 
from different propagation paths by using code correlation and can then 
combine them constructively. In CDMA, exploiting the path diversity 
reduces the transmitted power needed and increases the system capacity 
by reducing interference. 


10.7 Combining Methods 


The goal of a combiner is to improve the noise performance of the system [1,11,14]. 
After obtaining the uncorrelated signals, we need to consider the method of 
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processing these signals to obtain the best results. The analysis of combiners is 
generally performed in terms of SNR. We will examine several different types 
(selection, maximal-ratio, and equal-gain) of combiners and compare their SNR 
improvements over no diversity. 


10.7.1 Selection Combiner 

In this case, the diversity combiner selects the branch that instantaneously has 
the highest SNR (see Figure 10.6). We assume that the signal received by each 
diversity branch is statistically independent of the signals in other branches and 
is Rayleigh distributed with equal mean signal power Po. The probability density 
function of the signal envelope, on branch i, is given as (see Chapter 3) 


рт) = е "2р (10.25) 
Po 
where: 
2Ро = mean-square signal power per branch = «rj» 
r? = instantaneous power in the ith branch 


1 


Let ё; = r?I(2Ni) and & = (2P9)/(2Nj), where N; is the noise power in the ith 
branch 


(10.26) 
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Figure 10.6 Diversity selection combiner. 
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The probability density function for &; is given by 
Р) = Le 6% (10.27) 


0 


Assuming that the signal in each branch has the same mean, the probability that 
the SNR on any branch is less than or equal to any given value ё, is 


PLE = &] = | “pled; = 1-е-%® (10.28) 


Therefore, the probability that the SNRs in all branches are simultaneously less 
than or equal to ё, is given by 


Pale) = P [ën &2, «5 Em ж Ey] = [1 — e Eo M (10.29) 


The probability that at least one branch will exceed the given SNR value of & is 
given by: 


P (at least one branch = £j) = 1 — Рм(ё,) (10.30) 


The percentage of time the instantaneous output SNR £y is below or equal to 
the given value, £j, is equal to Р(ём = &,). The results of the selection combiner 
for M = 1, 2, and 4 are plotted in Figure 10.7. Note that the largest gain occurs 
for the 2-branch diversity combiner. 

By differentiating Equation 10.29 we get the probability density function 


Pyle) = M(&I&)l1 — ео) (10.31) 


The mean value of the SNR can be given as 


E v fë _ STER MN | 
= | DIE MP S (10.32) 


= M 
„м=у 1 (10.33) 
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Figure 10.7 Probability for different values of IV-selection combiners. 


Example 10.6 

We consider the 3-branch selection combiner in which each branch receives an 
independent Rayleigh fading signal. If the average SNR is 30 dB (1000), determine 
the probability that the SNR will drop below 10dB (10). Compare the result with 
a case without any diversity. 


Solution 
E. = 10dB and & = 30dB 


p,(10dB) =[1 — е \&®|М = [1 — e-001 B =1 x 1076 
When diversity is not used, M = 1 


p,(10dB) =[1 – е &&)]" [1 — e7001]! = 1 x 1972 
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10.7.2 Switched Combiner 

The disadvantage with selection combining is that the combiner must be able to 
monitor all M branches simultaneously. This requires M independent receivers 
which is expensive and complicated. An alternative is to use switched combining. 
In this case only one receiver is needed, and it is only switched between branches 
when the SNR on the current branch is lower than some predefined threshold 
value &,. This is called a switch and stay combiner. 

The performance ofa switch combiner is less than that in selection combining, 
since unused branches may have SNRs higher than the current branch if the current 
SNR exceeds the threshold. The threshold therefore has to be carefully selected in 
relation to the mean power on each branch, which must also be estimated with 
sufficient accuracy. 


10.7.3 Maximal Ratio Combiner 
In maximal ratio combining, M signals are weighted proportionally to their signal- 
to-noise ratios and then summed (see Figure 10.8). 


r= Уат (10.34) 


where: 
a; = weight of ith branch 
M = number of branches 


Since noise in each branch is weighted according to noise power, 


M M 
п) = У, У, аат) (10.35) 
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Figure 10.8 Maximal ratio combining. 
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M M 
№ = У ahi) = У ам, (10.36) 
i=1 і=1 
where: 
NT = average noise power 
n? (t) = 2N, 


The SNR at the output is given as: 


Ms 
a 
3 


ll 
A 


(10.37) 


aa 
= 
Il 
Nie 
= 


la; 2 N; 


1 


ll 
= 


We want to maximize £y. This can be done using the Schwartz inequality. 


M 


Y as, 
11 


і= 1 


M 
Уш? (10.38) 


і= 1 


2 
= 


M 
EMI 
1 
E 


If a; = r/( Nj), then using Equation 10.38 to define Equation 10.39 we get: 
A C EN (10.39) 


M M 
SÉ e 1 M ма -Y& (10.40) 


Thus, the SNR at the combiner output equals the sum of the SNR of the 
branches. 


= М _ М 
pe iM (10.41) 

=1 i=1 
EET (10.42) 
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The probability that ё, = &, 15 given by: 


He ® ®&)=1—е 9 25 = (10.43) 
PES 

рё. 2 ё) =e © ы (10.44) 
( M g) = (Ё = 1)! 


The plot of p for M = 1, 2, and 4 with maximal ratio combining is shown in 
Figure 10.9. 
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Figure 10.9 Probability for different values of maximal ratio combiner. 
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10.7.4 Equal Gain Combiner 

Equal gain combining is similar to maximal ratio combining, but there is no 
attempt to weight the signal before addition; thus a; = 1. The envelope of the 
output signal is given as: 


M 
r= Ун (10.45) 


(10.46) 


Assuming that mean noise in each branch is the same (i.e., N); Equation 10.46 
becomes 


M 
= Au 2. 7T. (10.47) 


but 7? = 2P,; and 7, = |/(тРо)/2. 


The various branch signals are uncorrelated, 17, = 17, = ТТ» for i not equal 
to j. Therefore Equation 10.47 will become: 


Es = 1 _ d тр Ss E T 
Ey = zu 2м + M(M - 1) ZA &1*(M-DZ| (10.48) 
ber (M- 105 (10.49) 
& 4 | 
For М = 2, the probability р can be written in the closed form as: 
26. lës] 
btt) Sle Ey -| 13 8-е Е -erf & (10.50) 
& £o 


For M > 2, the bit error probability should be obtained by a numerical integration 
technique. 
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Table 10.1 SNR ratio in dB. 


Maximal-ratio Equal-gain 
M Selection combiner combiner combiner 
1 —20 —20 —20 
2 —10 —8.5 —9.2 
4 —4.0 —1.0 —2.0 
6 —2.0 2.0 1.5 


Table 10.2 SNR improvement in dB at 1% bit-error probability. 


Maximal-ratio Equal-gain 

M Selection combiner combiner combiner 
2 10.0 11.5 10.8 
16.0 19.0 18.0 
6 18.0 22.0 21.5 


Table 10.1 shows M versus SNR at 1% bit error probability for the selection, 
maximal ratio, and equal gain combiner. Table 10.2 shows SNR improvement for 
M = 2, 4, and 6 at 1% bit error probability for the selection, maximal ratio, and 
equal gain combiner. It can be observed that the selection diversity combiner has 
the poorest performance and the maximal ratio the best. The performance of 
the equal gain diversity combiner is sightly lower than that of the maximal ratio 
combiner. The implementation complexity for equal gain combining is signifi- 
cantly less than the maximal ratio combining because of the requirement of cor- 
rect weighing factors. Performance of the three combining schemes is compared 
in Figure 10.10. 


10.8 Rake Receiver 


In 1958, Price and Green proposed a method of resolving multipath using wide- 
band pseudo-random sequences modulated onto a transmitter using other modu- 
lation methods (AM or FM) [4]. The pseudo-random sequence (see Chapter 11) 
has the property that its time-shifted versions are almost uncorrelated. Thus, a 
signal that propagates from transmitter to receiver over multipath (hence different 
time delays) can be resolved into separately fading signals by cross-correlating 
the received signal with multiple time-shifted versions of the pseudo-random 
sequence. Figure 10.11 shows a block diagram of a typical system. In the receiver, 
the outputs are time shifted and therefore must be sent through a delay line before 
entering the diversity combiner. The receiver is called a Rake receiver since the 
block diagram looks like a garden rake. 
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Figure 10.10 Performance comparison of various combining schemes. 


Tapped Delay Line 


Diversity Combiner 


Combiner Output 


Figure 10.11 Rake receiver. 


When CDMA systems were designed for cellular systems, the inherent wide 
bandwidth signals with their orthogonal Walsh functions (see Chapter 11) were a 
natural for implementing a Rake receiver. The Rake receiver reduces the effects of 
fading and provides spectral efficiency improvement of CDMA over other cellular 
systems. 
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In CDMA systems, the bandwidth (1.25 to 15 MHz) is wider than the 
coherence bandwidth of the cellular or PCS channel. Thus, when the multipaths 
are resolved in the receiver, the signals from each tap on the delay line are 
uncorrelated with each other. The receiver can combine them using any of the 
combining techniques described in the previous section. Thus, the CDMA system 
uses the multipath characteristics of the communication channel to its advantage 
to improve the operation of the system. 

The performance of the Rake receiver will be governed by the combining 
scheme used. In the IS-95 and WCDMA, the maximal ratio combining with 3 to 4 
branches is used. An important factor in the receiver design is to obtain sychroni- 
zation of the signals in the receiver. Since in CDMA, adjacent cells are also on the 
same frequency with different time delays on the Walsh codes, the entire СОМА 
system is tightly synchronized. 


Example 10.7 

A Rake receiver is used in the wideband СОМА (WCDMA) system (spreading rate 
3.84 Mcps) to reduce the multipath effects in the channel. What is the minimum 
delay difference to successfully resolve the multipath components and operate the 
Rake receiver? 


Solution 
In order to resolve multipath components, the chip duration should be equal to or 
greater than v, where 7 is defined as: 


delay distance A d, 


S 
speed of electromagnetic wave 300 x 106 


Chip duration of WCDMA system = ——.— - 026ys 
3.84 x 10° 
d 
—— 4 — = 0.26 x 1076 
300 x 106 
ла = 78m 


10.9 Link Budgets 


We discussed link margin in Chapter 3. In this section, we present a systematic 
procedure for developing a link budget of a wireless system [18]. A link budget is 
the calculation of the amount of power received at a given receiver based on the 
output power from the transmitter. The link budget considers all of the gains and 
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losses that a radio wave experiences along the path from transmitter to receiver. We 
need to perform the calculation in both directions: from the mobile station to the 
base station (uplink) and from the base station to the mobile station (downlink). 
We determine the maximum allowable path loss in each direction and use the 
lesser of the two to calculate the coverage for the cell and service in question. 
The link budget should include a margin to allow fading of the signal. 
In other words, we design the system such that service will be supported even if 
the signal fades significantly. The greater the fade margin, the greater the reliability 


Table 10.3 Uplink budget for speech (outdoor pedestrian) service at 12.2 kbps. 


Transmitter (Mobile Station) Note 
Mobile transmit power (dBm) 21 

Antenna gain (dBi) 0 

Body losses (dB) 3.0 

Equivalent isotropic radiated power 18 

(EIRP) 


Receiver (Base Station) 


Thermal noise density (dBm/Hz) —174 1010g(1.38 x 10723 x 290) = 
—204 dBW = —174dBm 

Receiver noise figure (dB) 5.0 

Receiver noise power (dBm), calculated for —103.2 —174 + 5 + 10109(3.84 х 106) = 

3.84 Mcps (see Chapter 11) — 103.2 dBm 

Interference margin (dB) 4 Depends on cell loading 

Total noise + interference (dBm) —99.2 

Processing gain (dB) (see Chapter 11) 25 10109(3.84 x 108/12.2 x 103) 

Required E,/Npo (dB) 4 Depend on service type 

Effective receiver sensitivity (dBm) —120.2 Total noise + interference — 
Processing gain + Required Ep/No 

Base station antenna gain (dBi) 18 

Base station feeder and connector losses 

(dB) 

Fast fading margin (dB) 4 Enables room for closed loop 
power control 

Log normal fading margin (dB) 7.5 Enable for greater cell-area 
reliability 

Building penetration loss (dB) 0 

Soft handoff gain (dB) 2 

Max. allowable path loss (dB) 144.7 18 – (-120.2) + (18 – 2 – 4 


—7.5 + 2) = 144.7 
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Table 10.4 Downlink budget for speech (outdoor pedestrian) service at 12.2 kbps. 


Transmitter (Base Station) 


BS transmit power (dBm) 
BS antenna gain (dBi) 
BS feeder and connector losses (dB) 


Equivalent isotropic radiated power 
(EIRP) (dBm) 


Receiver (Mobile Station) 


Thermal noise density (dBm/Hz) 


Receiver noise figure (dB) 


Receiver noise power (dBm), calculated for 
3.84 Mcps 


Interference margin (dB) 

Total noise + interference (dBm) 
Processing gain (dB) 

Required ЕЛ (dB) 


Effective receiver sensitivity (dBm) 


Mobile station antenna gain (dBi) 
Body losses (dB) 
Fast fading margin (dB) 


Lognormal fading margin (dB) 


Building penetration loss (dB) 
Soft handoff gain (dB) 
Max. allowable path loss (dB) 


40 
18 
2.0 
56 


—174 


167.7 


Note 


10W 


1010g(1.38 x 10723 х 290) = 
—204dBW = —174dBm 


—174 + 5 + 10log(3.84 x 108) = 
—103.2dBm 


Depends on cell loading 


10109(3.84 x 108/12.2 x 103) 
Service-dependent 


Total noise + interference — 
Processing gain + Required Ep/No 


Enables room for closed-loop 
power control 


Enable for greater cell-area 
reliability 


—(-124.2) + 56 + (-C3-4- 
7.5 + 2) = 167.7 


of the service. Tables 10.3 and 10.4 provide examples of the uplink and downlink 
link budget for the WCDMA speech service at 12.2 kbps (outdoor pedestrian). 
The maximum allowable path loss is 144.7dB based on uplink budget. The cell 


coverage must be based on the uplink path loss. 


10.10 Summary 


In this chapter we discussed the basics of antenna technology. We presented 
performance criteria of an antenna system and developed relations between the 
antenna gain, directivity, and beam width. We then moved to discuss diversity, an 
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extremely powerful method for improving the quality of communication systems. 
It is possible to achieve gains equivalent to power savings in excess of 10dB. 
These gains are obtained at the expense of extra hardware, particularly in terms 
of extra antennas and receivers, which must be balanced against the benefits. 
The key requirements for achieving the maximum benefit are that the multiple 
branches of the system should have substantially equal mean power and near-zero 
cross-correlation of the fading signal. We concluded the chapter by presenting 
link budget calculations for a WCDMA system. 


Problems 
10.1 Define gain, beam width, and radiation efficiency of an antenna. 


10.2 What is diversity? How is it provided in a communication system? 


10.3 Among the selection, equal-gain, and maximal ratio combining, which 
scheme is the best and why? 


10.4 In Problem 9.1, calculate the SNR ratio when a frequency of 6 GHz is used 
for the system. At this frequency, use 10 dB for the receiver noise figure. 


10.5 Repeat Problem 9.2 for 3 and 6 GHz and use 10 dB for the receiver noise 
figure. What can you say about system design needs as frequency is raised? 


10.6 If the 3-dB beam width of a linear element antenna is 8°, find its gain. 


10.7 A sector antenna has vertical and horizontal beam widths of 50? and 
60°, respectively. Calculate its gain (1) ignoring the side lobes and 
(2) accounting the side lobes. 


10.8 Calculate the time separation required for two signals to achieve a high 
degree of time diversity in a classical Rayleigh channel at 900 MHz with 
a mobile speed of 20 km/hour. 


10.9 Given a 2-branch selection combining system operated with independent 
Rayleigh fading, calculate the diversity gain for a probability of 1076. 


10.10 Repeat Problem 10.9 for the 2-branch maximal ratio combining system. 
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CHAPTER 11 


Spread Spectrum (SS) and 
CDMA Systems 


11.1 Introduction 

We introduced spread spectrum techniques in Chapter 6. In this chapter, we present 
details of direct-sequence spread spectrum (DSSS) and frequency-hop spread spec- 
trum (FHSS) systems [1,2,4]. We show how signal spreading and despreading is 
achieved with binary phase shift keying (BPSK) and quadrature phase shift keying 
(QPSK) modulation in the DSSS [11,12]. We then address multipath issues in wireless 
communications and show how code division multiple access (CDMA) takes advan- 
tage of multipath in improving system performance with a Rake receiver [6,13]. We 
conclude the chapter by presenting a summary of the challenges in implementing a 
CDMA system and providing some highlights of the Telecommunication Industries 
Association (TIA) IS-95 CDMA system. Those who are not familiar with spreading 
codes should refer to Appendix D. 


11.2 Concept of Spread Spectrum 

In a wideband spread-spectrum (SS) system, the transmitted signal is spread over a 
frequency band that is much larger, in fact, than the maximum bandwidth required to 
transmit the information bearing (baseband) signal [3]. An SS system takes a baseband 
signal with a bandwidth of only a few kilohertz (kHz), and spreads it over a band that 
may be many megahertz (MHz) wide. In SS systems, an advantage in signal-to-noise 
ratio (SNR) is achieved by the modulation and demodulation process. 

The SS signal is generated from a data-modulated carrier. The data-modulated 
carrier is modulated a second time by using a wideband spreading signal. An SS 
signal has advantages in the areas of security, resistance to narrowband jamming, 
resistance to multipath fading, and supporting multiple-access techniques. 

The spreading modulation may be phase modulation or a rapid change of 
the carrier frequency, or it may be a combination of these two schemes. When 
spectrum spreading is performed by phase modulation, we call the resultant signal 
a direct-sequence spread spectrum (DSSS) signal (see Figure 11.1) [15]. When 
spectrum spreading is achieved by a rapid change of the carrier frequency, we 
refer to the resultant signal as a frequency-hop spread spectrum (FHSS) signal 
[14]. When both direct-sequence and frequency-hop techniques are employed, the 
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Figure 11.1 Spread spectrum techniques. 
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resultant signal is called a hybrid DS-FH SS signal. Another way to also generate 
an SS signal is the time-hop spread spectrum (THSS) signal. In this case, the trans- 
mission time is divided into intervals called frames. Each frame is further divided 
into time slots. During each frame, one and only one time slot is modulated with 
a message (details of THSS are not given in this chapter). The DSSS is the averag- 
ing technique to reduce interference whereas FHSS and THSS are the avoiding 
techniques to minimize interference. 

The spreading signal is selected to have properties to facilitate demodulation 
of the transmitted signal by the intended receiver, and to make demodulation by 
an unintended receiver as difficult as possible. These same properties also make 
it possible for the intended receiver to differentiate between the communication 
signal and jamming. If the bandwidth of the spreading signal is large relative to 
the data bandwidth, the spread-spectrum transmission bandwidth is dominated 
by the spreading signal and is independent of the data signal bandwidth. 

Consider the channel capacity as given by the Shannon equation [10]: 


C = B,,log,(1 + S/N) (11.1) 


where: 
By = channel bandwidth in Hertz (Hz) 
C = channel capacity in bits per second (bps) 
S = signal power 
N = noise power 


Equation 11.1 provides the relationship between the theoretical ability of a 
communication channel to transmit information without errors for a given signal- 
to-noise ratio and a given bandwidth of the channel. The channel capacity can 
be increased by increasing the channel bandwidth, the transmitted power, or a 
combination of both. 

Shannon modeled the channel at baseband. However, Equation 11.1 is applicable 
to a radio frequency (RF) channel by assuming that the intermediate frequency (IF) 
filter has an ideal (flat) bandpass response with a bandwidth that is at least 2B,,. This 
bound assumes that channel noise is additive white Gaussian noise (AWGN). AWGN is 
often used in the modeling of an RF channel. This assumption is justified since the total 
noise is generated by random electron fluctuations. The central limit theorem provides 
us with the assumption that the output of an IF filter has a Gaussian distribution and is 
frequency independent. For most communications systems that are limited by thermal 
noise, this assumption is valid. For interference-limited systems, this assumption is not 
valid and the results may be different. The Shannon equation does not provide a method 
to achieve the bound. Approaching the bound requires complex channel coding and 
modulation schemes. In many cases, achieving an implementation that provides perfor- 
mance near this bound is impractical due to the resulting complexity. Spread spectrum 
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systems can be engineered to operate at much lower SNRs since the channel bandwidth 
can be traded for the SNR to achieve good performance at a very low SNR. 


We rewrite Equation 11.1 as: 


= = 1.44log,(1 + S/N) (11.2) 
Since 
_ S 1/S\2 , 1/S\3_1/S\4 
log,(1 + S/N) = Š 15 +105) 15 а (11.3) 


Assuming that the S/N ratio is small (e.g., S/N = 0.1), we can neglect the higher- 
order terms and rewrite Equation 11.2 as: 


C 1 
В, = —— X —— : 
е 144 — (SIN) nc) 


For any given S/N ratio we can have a low information error rate by increasing 
the bandwidth used to transmit the information. As an example, if we wish a 
system to operate on an RF link in which the data information rate is 20 kilobits 
per second (kbps) and the S/N ratio is 0.01, we should use a bandwidth of 


— 20x10 . 6 
В,, т 1.38 х 10°Hz or 1.38 MHz (11.5) 


Information сап be modulated into the SS signal by several methods. The most 
common method is to multiply the information with the spread-spectrum code (refer 
to Appendix D) before it is used to modulate the carrier frequency (see Figure 11.2). 
This technique applies to any SS system that uses a spreading code to determine RF 
bandwidth. If the signal that is being sent is analog (voice, for example), the signal 
must be digitized before being modulated by the spreading code. 


Modulator 


c(t) c(t) 
Direct Sequence (DS) Generator 


Sampling 


Detection Device 


x(t) ——> 


Integrator 


Figure 11.2 Direct sequence spread spectrum system. 
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11.3 System Processing Gain 

In the DSSS system the baseband signal is spread over a large bandwidth by a 
spreading code. One of the major advantages of a DSSS system is the robustness 
to interference [8,9]. The system processing gain, Gp, quantifies the degree of 
interference rejection. The system processing gain is the ratio of spreading rate, 
Re, to the information rate, Къ, and is given as: 


G, = R/R, (11.6) 


where: 
R, = information bit rate 
К, = spreading rate 


Typical processing gains of a DSSS system lie between 10 and 60dB. With 
a DSSS system, the total noise level is determined both by thermal noise and by 
interference. For a given user, the interference is processed as noise. The input and 
output S/N ratios are related as: 


(S/N), = G,(S/N); (11.7) 
We express input (S/N); ratio as: 
S\ _ [Eo X Ry) _ [Eo 1 
(А) E x x s] á Gp PH] 
where: 
Ep = bit energy 
No = noise power spectral density 
Using Equation 11.8 we rewrite Equation 11.7 as: 
S) _ (S _ [Ee 
(87, Cp (А) (к) oe 
but 
S| _/{E,X Rp - (8) -2 11.10 
(5), Fe m :J] No], Gp (11.10) 


Therefore using Equation 11.9 and Equation 11.10 we get, 


($) = с, - [xe] (11.11) 


322 11 Spread Spectrum (SS) and CDMA Systems 


Example 11.1 

A DSSS system has a 1.2288 megachips per second (Mcps) code clock rate and 
a 9.6kbps information rate. Calculate the processing gain. How much improve- 
ment in information rate is achieved if the code generation rate is changed to 
5 Mcps and the processing gain to 256? 


Solution 


1.2288 х 106 _ = Е 
TEENE 128 = 10log128 = 21 dB 


Improvement in information rate = 19.53 — 9.6 = 9.93 kbps 

In a DSSS system the information signal, x;(t), is multiplied by a wideband 
code signal, c;(t), which is the output signal of the direct sequence (DS) generator 
(see Figure 11.2) [7,9]. The signal x;(t) X ct) = m(t) is modulated and trans- 
mitted. This signal occupies a bandwidth far in excess of the minimum band- 
width required to transmit the information signal x;(t). We can observe from 
Figure 11.3 that the combined signal waveform has more high frequency changes 
in the data information since 1/T, >> 1/T,, where Тр is the bit interval of the 
information stream and T, is the bit interval of the DSSS stream. T; is called a chip 
interval. In a DSSS system, the pulse shape is a sequence of short rectangular pulses 
called chips. The chips are a pseudo-random sequence of 1’s and —1's known at 
the receiver and often having a repetition period equal to the symbol period. 


Since Rp = 1/Tp and B,, = 1/T;, 


Tp _ By, 

багат 
When x;(t) апа c;(t) have the same rate, the product m,(t) contains all the 
information of x,(t) and has the same rate as c;(t). The spectrum of the signal 
remains unchanged, and the incoming bit stream is said to be encrypted or 
scrambled. However, when с;(#) has a higher rate than x,(t), m,(t) contains all the 
information of x;(t), has a higher bit rate compared to x;,(t), and is said to have had 

its spectrum spread (refer to Figure 11.3). 


11.3 System Processing Gain 323 


PN Sequence, c;(t) 
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Figure 11.3 Direct sequence (DS) spreading. 


Let us consider the downlink CDMA operation, in which the base station 
generates a data stream for mobile 1, 2, and 3 ... x;(t), and multiplies the data 
stream by an appropriate DS code, c;(t). Next, we add the coded data streams (see 
Figures 11.4, 11.5, and 11.6): 


z(t) = 2n (11.12) 


We modulate the resultant baseband spread spectrum signal, Equation 11.12, by 
a carrier (frequency w, = 2«f.) to obtain 


z(t) = А. 


1 1 


3 
2 sso bs ad (11.13) 


j=l 


The spread signal at the receiver for mobile, i, is z;(t) + noise, where z;(t) is trans- 
mitted over the allocated bandwidth. 
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3 


(D =A, Diglt — jt т) coslo + Ф) (11.14) 


j=1 


N 
v— 
= 
— 
Il 


Equation 11.14 contains the desired user signal and other users' signals. After 
multiplication by a coherent carrier phase ф; estimated by the receiver, a locally 
generated DS sequence that is the exact replica of the desired code transmitted 
multiplies the incoming signal — despreading. We assume that this DS sequence is 
in perfect synchronization (receiver estimates delay ту) with the transmitted signal 
so that: 


c(t — т) — т) = 1 (11.15) 


The multiplier output yields the desired data signal x (t — т) plus interfering 
terms due to other users. Ideally, the integrator, an integrate-and-dump over Ty, 
should produce a cross-correlation between the desired signal and interferers that 
is 0. Hence, the output for mobile і is the transmitted data stream, x,(t — Tj 


Magnitude 


Spreading (ft) = x(t) c(t) 


Figure 11.4 Downlink DSSS operation—signals for mobile 1, 2, and 3. 
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Figure 11.5 Resultant demodulated signal at a mobile. 


Example 11.2 

We consider signals transmitted from a base station to mobile 1, 2, and 3. The 
data streams x1(£), x2(t), and x3(t) are multiplied with codes c1(t), c2(t), and c3(t), 
respectively (see Figure 11.4). The resultant demodulated signal z(t), sum of 7 (2), 
m(t), and m3(t) is given in Figure 11.5. Show that the transmitted signals to 
mobiles 1, 2, and 3 are recovered at the mobile receivers by despreading the resul- 
tant signal z(t). Neglect propagation delay. 


Solution 


From Tables 11.1, 11.2, and 11.3, we observe that the transmitted signals for 
mobile 1, 2, and 3 are recovered by despreading at the receivers. 


Table 11.1 z(t)c4(t) [see Figure 11.6(a)]. 


Tb 2T, 3T, AT, 5ТЬ 
Value of integration at end of bit —6 4 6 —2 —12 
period 
Bit value (if value of integration 1 0 0 1 1 


is <0, then bit value equals 1) 


Despreading 
z(tye(t) | | t 


Figure 11.6(a) Despreading of resultant demodulated signal at mobile receivers. 
Table 11.2 2(0с2(2 [see Figure 11.6(b)]. 


Tb 2T, 3T; 4T, 5T 
Value of integration at end =2 —6 8 —4 -8 
of bit period 
Bit value 1 1 0 1 1 


Table 11.3 2(0сз(2 [see Figure 11.6(c)]. 


Tp 2T, 3T, 4T 5ТЬ 
Value of integration at епа —6 4 —8 —8 8 
of bit period 
Bit value 1 0 1 1 0 
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Figure 11.6(b) (Continued). 


11.4 Requirements of Direct-Sequence Spread Spectrum 


In the DSSS system, the entire bandwidth of the RF carrier is made available to 
each user. The DSSS system satisfies the following requirements [16]: 


* The spreading signal has a bandwidth much larger than the minimum band- 
width required to transmit the desired information which, for a digital system, 
is baseband data. 

* The spreading of the information is performed by using a spreading signal, 
called the code signal (see Appendix D). The code signal is independent of 
the data and is of a much higher chip rate than the data signal. 
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Figure 11.6(c) (Continued). 
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* At the intended receiver, despreading is accomplished by cross-correlation 
of the received spread signal with a synchronized replica of the same code 
signal used to spread the data. 


11.5 Frequency-Hopping Spread Spectrum Systems 

In FHSS systems, the binary pseudo-random noise (PN) code generator drives the 
frequency synthesizer to hop to one of the many available frequencies chosen by 
the PN sequence generator. When the hopping rate is higher than the symbol rate, 
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we have a fast frequency-bop system. If the hopping rate is lower than the symbol 
rate, i.e., there are several symbols transmitted per frequency hop, we have a slow 
frequency-hop system. 

In an FHSS system b bits are used as an integer index for selecting the hop 
frequency. The term chip is also used in FHSS, but its meaning is different from the 
DSSS meaning of the word. It depends on whether the system is a slow frequency 
hop (FH) or a fast FH. In FH/M-ary frequency shift keying (MFSK) a system chip 
is the tone of shortest duration. The chip rate, Re, is the maximum of R, and К, 
where К; is the symbol rate and R; is the hop rate. Thus, for slow FHSS systems, 
the chip rate is equal to the symbol rate (i.e., Re = Rs), whereas for fast FHSS 
systems, the chip rate is equal to the hop rate (i.e., Re = Rp). 

In a slow FHSS system with MFSK, the selected M frequencies must be an inte- 
ger number of symbol rates apart. The spacing is required to maintain orthogonality 
between the frequencies and to allow reliable noncoherent detection. This implies 
that the minimum bandwidth of an MFSK signal should be about MR,. 

The modulation scheme commonly used with a fast FHSS system is MFSK, 
where b = log? M bits are used to determine which one of M frequencies should 
be used. The position of the M-ary signal set is shifted pseudo-randomly by the 
frequency synthesizer over a hopping bandwidth Bw. The frequency synthesizer 
produces a transmission tone based on the simultaneous instructions of the PN 
code and the data. At each frequency hop-time a PN generator feeds the fre- 
quency synthesizer a frequency word (a sequence of b chips) which decides one 
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Figure 11.7 FHSS system. 
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Figure 11.7 (Continued). 


of 2? symbol-set positions (see Figure 11.7). The frequency hopping bandwidth, 
В, and the minimum frequency spacing between consecutive hop positions, Af, 
determine the minimum number of chips necessary in the frequency word. The 
processing gain, Gp, of an FHSS system is given as: 


Hopping Bandwidth _M-Af 
Minimum Frequency Spacing Af 


Gp = =M (11.16) 


In the fast frequency-hop systems, there are L frequency hops during a symbol 
interval (T) (1.е., T; = LT, or Re = LR,) 


-. Hopping Bandwidth = (KMAf)L (11.17) 


where: 
K = factor for frequency multiplication 
M =2? is the number of frequencies produced by frequency synthesizer 
b = bit in a symbol 
L — frequency hops per symbol 


= MKL (11.18) 


The processing gain of a fast frequency hop system is dependent upon the 
number of frequencies used (M), the number of hops per symbol (L), and the fre- 
quency multiplication factor (K). 
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Example 11.3 

In an FHSS system, a hopping bandwidth of 100 MHz and a frequency spacing of 
10 KHz is used. What is the minimum number of PN chips that are required for 
each frequency symbol? 


Solution 


6 


Number of frequency tones in hopping bandwidth — 10 


Minimum number of chips — По: (104). — 13 chips 


Example 11.4 
A communication system transmits at 120 kbps and uses 32-FSK (Frequency Shift 
Keying). A hop rate of 2000 hops per second is used over an available spectrum 
of 10 MHz. Assuming a negligible synthesizer switching time between hops, cal- 
culate (a) data symbol transmitted per hop, and (b) the number of nonoverlapping 
hop frequencies. 


Solution 
For 32-FSK, we have 32 = 2° i.e., b = 5 bits per symbol 
12008 = 24kbps 


Since the symbol rate is higher than the hop rate, the system is a slow FHSS 
system. 


Symbol rate = 


24,000 _ 
2,000 a 
Minimum bandwidth B,, of an M-ary FSK ~ MRs: 


Number of symbols per hop = 


By = 12 X 24 = 288kHz 


Number of nonoverlapping hop frequencies: 


_ 10MHz 
288 kHz 


"pH 


Example 11.5 

Consider an FHSS system in which the input data rate is 200 bits per second. 
The modulation scheme of 32-ary FSK is used to generate the modulation sym- 
bol. The frequency hopping rate is 200 hops per second. Calculate: (a) minimum 
separation between frequency tones; (b) number of frequency tones produced by 
a frequency synthesizer; (c) processing gain; and (d) hopping bandwidth. Assume 
a frequency multiplication factor K — 1. 
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Solution 
With the 32-FSK modulation scheme there are 5 chips per symbol: 


= 40 symbols/sec 


Symbol rate: К; = 220 


The hop rate is higher than symbol rate, the system is a fast FHSS system. 


Symbol duration = 5 = 25 ms 


L = 200 


40. 7 5 hops/symbol 


Chip duration = 2 = 5 ms 


Minimum separation between tones = —! _ = 200Hz 
5 X 10-3 


М = 2? = 32 frequency tones 


Frequency hopping bandwidth = KMAfL = 1 X 32 X 200 X 5 = 64kHz 


Gy = MKL = 32 X 1 X 5 = 160 


11.6 Operational Advantages of SS Modulation 
The following are the operational advantages of SS modulation: 


* Low probability of intercept: Low probability of intercept implies that 
a third party cannot easily eavesdrop on the conversation or has to uti- 
lize expensive means to accomplish this. A standard communications 
receiver selects a demodulation circuitry, such as an amplitude demodula- 
tor, a frequency demodulator, or a phase demodulator, depending on the 
modulation scheme used at the transmitter. In an SS system, the receiver 
demodulates the transmitted energy through some correlation process and 
effectively combines various components within a wider bandwidth. A 
single-channel receiver will thus detect a small portion of the transmitted 
signal which will be too weak for normal detection, and even if it could be 
magnified to a detectable level would be incomplete and thus not possible 
to understand. 


Low probability of position fix: Conventional radio transmitters are easily 
pinpointed by simple and inexpensive direction finders. The spectral-spreading 
concepts make this task much more demanding as greater processing power 
and integration time will be required within each resolution. 
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* Low probability of signal exploitation: This refers to the possibilities which exist 


within a communication scenario to exploit the communication link by some 
manipulation of the waveforms used to carry the message. These could be: 


* destruction of synchronization messages; 
* destruction or alteration of the message contents; 
* invisible or concealed addition of data bits. 


High resistance to jamming and interference: SS systems are inherently more 
robust against jamming and interference than systems not using spreading 
techniques. This property of SS modulation is used in military systems where 
the main design objective is to develop a system which is able to deliver a 
message through a very hostile and impenetrable medium. SS modulation 
techniques provide an additional factor which is not seen in conventional 
systems. This is due to the fact that a code is used in the spreading process 
and unless the jammer/interferer manages to get hold of this code the impact 
of the jamming/interference is reduced by a significant amount. There are 
two very important aspects of SS with respect to jamming and interference. 
The first relates to the actual protection provided by an SS code. The SS 
receiver provides a post-detection signal-to-noise and signal-to-interference 
improvement. This means that if the SS signal can be received with sufficient 
clarity and strength and without interference signals, intelligent jammers 
might redirect the same waveform with more power and cause problems 
for the detection process in the data link. This is a practical limitation since 
a limited number of spreading codes are used in an SS modem and thus 
the transmission tends to repeat the same codes a large number of times. 
The vulnerability lies in the fact that the code might be revealed if it sticks 
out clearly only once—for instance if it is received at a very short distance 
from the transmitter. This points at the very important requirement of SS 
systems, that the spectral-spreading scheme should be sufficiently agile and 
use frequent change of code structures. The next important aspect of SS 
modulation with respect to jamming and interference is that SS modulation 
provides a practical way of coping with frequency-band congestion. 


High time resolution/reduction of multipath effects: Multipath effects are 
one of the unavoidable effects in radio communication. Multipath implies 
that the signal reaching the receiver antenna has travelled by two or more 
paths. Because these routes inevitably are of different lengths, the time 
delays of signals that have come along the respective paths are different and 
the signal will fade in or out with small displacements of the transmitter and 
receiver (displacements of the order of half a wavelength). Methods exist 
whereby the signal is coded such that the signals reaching the receiver via 
different paths add up in phase at the receiver. Adaptive methods capitalizing 
on the wider bandwidth of SS waveforms make it possible to use radio 
communication under extremely severe multipath conditions. Example of 
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such are wireless local area networks used inside rooms or buildings where 
the propagation conditions are very poor. 


Cryptographic capabilities: The coding aspects of SS modulation have impli- 
cations for possible security function in a communication link. The spreading 
codes can be chosen such that they serve the dual purpose of spreading the 
frequency spectrum of the transmitted signal and making it difficult to deci- 
pher the message. This requires that the code provide the required spectral 
signature (usually reasonably flat), has good anti-cryptographic property, and 
is sufficiently redundant. As these criteria place rather tough requirements on 
the coding strategy, a more common approach is to implement SS coding and 
scramble the code for cryptography independently and usually sequentially. 


11.7 Coherent Binary Phase-Shift Keying DSSS 


The simplest form of a DSSS communication system uses coherent binary phase- 
shift keying (BPSK) for both data modulation and spreading modulation. But the 
most common form uses BPSK for data modulation and quadrature phase-shift 
keying (QPSK) for spreading modulation. 

We first consider the simplest case. The ith mobile station is assigned a spread- 
ing code signal c,(t) (a periodic spreading code sequence with chips of width Т). 
Each mobile station has its own such code signal. Information bits are transmitted 
by superimposing the data bits onto the code signal. If the ith mobile station trans- 
mits the binary data waveform x;(t)[x;(t) = +1], it forms the binary sequence. 


mit) = x;(t)ci(t) (11.19) 


Equation 11.19 represents the modulo-2 addition of c,(t) and x;(t) as a multipli- 
cation because the binary 0 and 1 represent values of 1 and —1 into the modulator. 
The transmitted signal from the ith mobile is 


s(t) = xjt)c(t)V2Pcos(w.t + Фф) (11.20) 


where: 
xilt) = baseband signal for the ith mobile 
c(t) = spreading code for the ith mobile 
wc = carrier frequency 
P — signal power 
ф = data phase modulation 


If Ty is the bit period of st), then Tp may correspond to either a full period 
for c(t), or to a fraction of a period. If Ty is less than one code period, then the 
data bits are modulating the polarity of a portion of a code period. The code c;(t) 
serves as a subcarrier for the source data. Since each mobile station uses the entire 
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channel bandwidth and since Equation 11.19 has a code chip rate of I/T, chips per 
second, each BPSK carrier uses an RF bandwidth of 


By = (11.21) 


a 


The available channel RF bandwidth determines the minimum chip width, and 
the code period determines its relation to the bit time. The number of code chips 
per bit is given by: 


G, = в, (11.22) 


The ratio В,„/Кь is the CDMA processing gain, Gp, or simply, the spreading ratio 
of code modulation. This shows how much the RF bandwidth must be spread 
relative to the bit rate, Къ, to accommodate a given spreading code length. Each 
mobile station (MS) uses the same RF carrier frequency and RF bandwidth, but 
with its own spreading code c;(t). 

The signal in Equation 11.20 is transmitted using a distortionless path with 
transmission. The signal is received together with some type of interference and/ 
or Gaussian noise. Demodulation is performed in part by remodulating with the 
spreading code appropriately delayed as shown in Figure 11.8. This correlation of 
the received signal with the delayed spreading waveform is the despreading. This 
is a critical function in all spread spectrum systems. The signal component of the 
output of the despreading is: 


x(t — та) V2P c(t — та) X c(t — tg)cos(w,(t — та) + Фф) (11.23) 


where: 
Та = receiver’s best estimate of the transmission delay 


Since c(t) = +1, the product сї — tg) X c(t — 44) will be unity if ty = 44, 
that is, if the code at the receiver is synchronized with the spreading code at the 
transmitter. When correctly synchronized, the signal component of the output of 
the receiver despreading is equal to /2Px,(t — та) cos(w,(t — та) + Фф), which can 
be demodulated using a conventional coherent phase modulator. 

The bit error probability, Pe, associated with the coherent BPSK spread spec- 
trum signal is the same as with the BPSK signal and is given as: 


Ep 
Re), 


-d ор. ($ Il (11.24) 
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Figure 11.8 DSSS system with BPSK. 


where: 


(u) = 


e —и?/2 


(Оти) 
Ep = P/R, = energy per bit 


, 4 >> 1 is known as O function (see Appendix C) 


11.8 Quadrature Phase-Shift Keying DSSS 


Sometimes it is advantageous to transmit simultaneously on two carriers which 
are in phase quadrature. The main reason for this is to save spectrum because, for 
the same total transmitted power, we can achieve the same bit error probability, 
Pe, using one-half the transmission bandwidth. The quadrature modulations are 
more difficult to detect in low probability of detection applications. Also, the 
quadrature modulations are less sensitive to some types of jamming. We refer to 
Figure 11.9 and write: 


s(t) = УРсд(2) cos[ot + 6] + /Pco(t)sin[et + 4] (11.25) 


s(t) = aj(t) + ao(t) (11.26) 
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Figure 11.9 DSSS system with OPSK. 


where: 

c(t) and co(t) are the in-phase and quadrature spreading codes and a(t) and 
ao(t) are orthogonal. This condition is satisfied in the present case since с?) and 
co(t) are independent code waveforms. 


The receiver for the transmitted signal is shown in Figure 11.9. The bandpass 


filter is centered at frequency oy and has a bandwidth sufficiently wide to pass the 
data-modulated carrier without distortion. 


x(t) = /PI2c(t — та)с(# — *3)cos [oct + Ф] + (УР/2)со 
X (t — ta)c(t — 24)sin [oct + Ф] (11.27) 


y(t) = УР/2с1( — v4)co(t — 4)sin (oct + b) + (VP/2)eo 
X (t — 1a)co(t — ?а)соѕ [ost + Фф] (11.28) 


If the receiver-generated replicas of spreading codes are correctly phased then 


c(t — 1a)ci(t — tg) = colt — ta)cQ(t — 74) = 1 (11.29) 
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z(t) = x(t) + y(t) = У/2Рсоѕ[о + Фф] (11.30) 


The signal z(t) is the input to a conventional phase demodulator where data is 
recovered. 

When the spreading codes are staggered one-half chip interval with respect 
to each other, the QPSK is called offset-QPSK (OQPSK). In OQPSK, the phase 
changes every one-half chip interval, but it does not change more than +90°. This 
limited phase change improves the uniformity of the signal envelope compared to 
BPSK and QPSK, since zero-crossings of the carrier envelope are avoided. Neither 
QPSK nor OQPSK modulation can be removed with a single stage of square-law 
detection. Two such detectors and the associated loss of signal-to-noise ratio are 
required. QPSK and OQPSK offer some low probability of detection advantages 
over the BPSK method. 


11.9 Bit Scrambling 
Referring to Table 11.4, we consider the following activities at a given transmitter 
location (see Figure 11.10): 
1. An arbitrary data sequence s;(t) is generated by a digital source. 
2. An arbitrary code sequence c;(t) is produced by a DS generator. 
3. Two sequences are modulo-2 added and transmitted to a distant receiver. 
4 


. At the distant location, the resulting sequence (assuming no propagation 
delay) is picked up by the receiver (see Figure 11.10). 


Table 11.4 Operations with modulo-2 addition. 


Transmitter 1 st) 1 1 0 1 0 0 1 1 1- 1 
2 сд 1 0 0 1 1 1 0 1 о 0 
3 s(t) cit) 0 1 0 0 1 1 1 0 1 1 
Receiver 4 s(t) Oct) 0 1 0 0 1 1 1 0 1 1 
5 ct) 1 0 0 1 1 1 0 1 0 0 
6 s(t) ® cit © cit) = s(t) 1 1 0 1 0 0 1 1 1 1 


s((t) 


Figure 11.10 Mobile transmitter. 
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5. The code c,(t) used at the transmitter is also available at the receiver. 
6. The original data sequence is recovered by modulo-2 adding the received 
sequence with the locally available code с;(2). 


Next, referring to Table 11.5, we consider the following set of activities at 
the given transmitter location. 


1. An arbitrary data sequence s;(t) is generated by a digital source. In this 
case, we use + 1s and —1s to represent 05 and 1s. 

2. An arbitrary code sequence c;(t) is produced by a DS generator. 

3. We multiply 5) and c(t). The output of the multiplier is transmitted to a 
distant receiver. 

4. At the distant location, the resulting sequence (again assuming no propa- 
gation delay) is picked up by the receiver (Figure 11.11). 

5. The code сї) used at the transmitting location is also available at the 
receiver. 

6. The original data sequence is recovered by multiplying the received 
sequence by the locally available code, c;(t). 


From Tables 11.4 and 11.5 we conclude that modulo-2 addition using 1s and 
Os binary data is equivalent to multiplication using —1 and 1 binary data as long as 
we remain consistent in mapping Os to +1s and 1s to —1s as shown in Table 11.5. 
(For circuit implementation, modulo-2 addition is preferred since exclusive OR 


Table 11.5 Operations without modulo-2 addition. 


Transmitter 1 s(t) =1 -1 1 -1 1 1-1-1-1 -1 
cit) —1 1 1 1 1 1 1 1 1 1 
s(t) - ct) 1 -1 1 1 1 1 1 1 1 1 
silt) - c(t) 1 -1 1 1 1 1 1 1 1 1 
cit) =1 1 1 1 1 1 1 1 1 1 
silt) - c(t) - c(t) = s(t) —1 -1 1 -1 1 1-1-1-1 -1 


Receiver 


2 
3 
4 
5 
6 


Figure 11.11 Mobile transmitter. 
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gates are cheaper than multiplication circuits. However, for modeling purposes, 
the multiplication method is usually easier to formulate and understand than the 
modulo-2 approach.) 

We notice that for the output of the receiver to be identical to the original 
data, the following relationship must be satisfied: 


si(t)ci(t)ci(t) = sit) (11.31) 


In other words, c;,(t)c,(t) must be equal to 1. Note that сї) is a binary 
sequence made up of 1s and —1s, therefore 


If c(t) = 1, ссд) = 1 (11.32) 
If c(t) = —1, ссд) = 1 (11.33) 


In these discussions we assume that there is no propagation delay and no 
other processing delay incurred between the transmitter and receiver input. Thus 
the code copy used at the receiver is perfectly lined up with the initial code used 
at the transmitter. The two codes are said to be in phase or in synchronization. 
In practice, however, propagation delay and other processing delays (т) occur 
between the transmitter and the receiver. Therefore, the receiver may be time- 
shifted relative to the initial code at the transmitter. The two codes are no longer 
in synchronization. As a result, the output of the receiver will no longer be identi- 
cal to the original data, s;(£). 

In order to recover the original data, s,(t), we must “tune” the receiver code 
sequence to that of the incoming code from the transmitter. In other words, we 
must time-shift the receiver code in order to line it up with the incoming code. It 
should be noted that by synchronizing or “tuning” the receiver code to the phase 
of the incoming code сд? — т;), the original data (shifted by propagation delay) 
can now be recovered at the output of the receiver. 

In these discussions, the data sequence and code sequence are assumed to 
have the same length (one code bit for each data bit) and are used for encrypting 
the data bits. The process is referred to as bit scrambling. 


11.10 Requirements of Spreading Codes 
To spread the data sequence, the code sequence must be much faster than the data 
sequence, and exhibit some random properties. 

By multiplying the data sequence with the faster code sequence, the result- 
ing product yields a sequence with more transitions than the original data. Using 
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suitable random-like codes, the resulting sequence will have the same rate as the 
code sequence. It is desirable to use a set of orthogonal codes (see Appendix D) 
to provide good isolation between users. However, in practice, the codes used are 
not perfectly orthogonal, but they exhibit good isolation characteristics, i.e., they 
have low cross-correlation. 


11.11 Mlultipath Path Signal Propagation and 
Rake Receiver 

In the absence of a direct line-of-sight signal from the base station (BS) to the 
mobile station (or the received signal at the mobile station from the base station), 
the signal is made up of the sum of many signals, each travelling over a separate 
path. Since these path lengths are not the same, the information carried on the 
radio link experiences a spread in delay as it travels between the base station and 
the mobile. In addition, to delay spread, the same multipath environment causes 
severe local variations in signal strength as these multipath signals are added con- 
structively and destructively at the receiving antenna. This effect is called Rayleigh 
fading (see Chapter 3). The movement of a mobile causes each received signal 
to be shifted in frequency as a function of the relative direction and speed of the 
mobile. This effect is called Doppler shift (see Chapter 3). 

Multipath is treated as causing delayed versions of the signal to add to the 
system noise when the differential delay exceeds the chip time, T.. Substantial 
performance improvement can occur by detecting each additional path separately, 
thereby enabling the signals to be combined coherently. A receiver can be imple- 
mented to resolve each individual path such that the paths can be combined to 
produce an overall gain. This type of receiver is known as a Rake receiver. 

In the Rake receiver for user # 1 (refer to Example 11.2) baseband demodu- 
lated signal Z(t) is the sum of N signals which arrives on N different paths (see 
Figure 11.12). We consider path 2, the multiplication of Z(t) by c(t — Az). The 
integration starts at time Az and ends at Ty, to yield the peak response for the 
path 2. (The output of the integrator is the value of the correlation function of 
ci(t) for a particular delay. For path 2, this delay is zero, whereas for the other 
paths the delay exceeds the time duration of a chip.) The contributions from other 
paths average out to 0, since the differential delays exceed the chip duration, T,. 
The response from each path is summed to produce the stronger signal. We illus- 
trate this concept with Example 11.6. 


Example 11.6 

We consider the downlink in Example 11.2 where the demodulated signal at the 
mobile is z(t) = m(t) + m(t) + тз(ї) (see Figure 11.13(a)) for mobile 1, 2, 
and 3. We assume two equal-strength paths and write the demodulated signal 
as Z(t) = z(t) + z(t-2T.) (see Figure 11.13(c)). The differential delay between 
these two paths is taken as 2T; for simplicity. We will show how mobile 1 will 
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Figure 11.12 Simplified Rake receiver for user 1 (equal gain combining). 


detect its information using a two-path Rake receiver. The results are shown in 
Figures 11.13(a), 11.13(b), 11.13(c), and 11.14. 


Solution 

Individual path outputs (Tables 11.6 and 11.7) yields an error in a particular bit 
position. The Rake combining strengthens the signal and removes the error, as 
shown in Table 11.8. 


Table 11.6 Z(t) - c4(t). 


Tp 2T, 3T, 4ТЬ 5Tp 
Value of integration at end —4 —4 8 —8 — 12 
of bit period 
Detected bit value 1 1 0 1 1 


Actual bit value 1 0 0 1 1 
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Path 2: z(t — 2T,) 


Figure 11.13(a, b) Mobile #1 sequence locked on path 1. 


11.11 Multipath Path Signal Propagation and Rake Receiver 345 


(c) A 


Z(t) = Path 1 + Path 2, i.e., [z(t) + z(t-2T,)] 


Figure 11.13(c, d) (Continued). 
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c,(t-2T;) 


=A 


Figure 11.14 Mobile #1 sequence locked on path 2. 


Table 11.7 Z(t) - c(t — 27). 


Tb 2T, 
Value of integration at end -8 8 
of bit period 
Detected bit value 1 0 
Actual bit value 1 0 


Table 11.8 Sum of path 1 and path 2 integrator. 


Tp 2T, 
Path 1: Integrator output —4 —4 
Path 2: Integrator output -8 
Sum of integrator outputs —12 4 
(Rake receiver output) 
Detected bit value 1 


Mobile 1 bits 1 


3T, 


12 


4T, 


5T, 
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11.12 Critical Challenges of CDMA 
Code division multiple access (CDMA) is based on DSSS. CDMA is more complex 
than other multiple access technologies and as such poses several critical challenges. 


e All users in a given cell transmit at the same time in the same frequency 
band. Can they be made not to interfere with each other? 


* Will a user who is near the base station saturate the base station altogether so 
that it cannot receive users who are farther away (known as near-far problem)? 


* CDMA uses a reuse factor of one. This means that the same frequency is 
used in adjacent cells. Can the codes provide sufficient separation for this to 
work well in most situations? 


* CDMA uses soft handoffs where a moving user can receive and combine 
signals from two or more base stations at the same time. What is the impact 
on base station traffic handling ability? 
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Qualcomm proposed the CDMA radio system for digital cellular phone applica- 
tions. It was optimized under existing U.S. mobile cellular system constraints of 
the advanced mobile phone system (AMPS). The CDMA system uses the same 
frequency in all cells and all sectors. The system design has been standardized by 
the TIA as IS-95 and many equipment vendors sell CDMA equipment that meet 
the standard. 

The IS-95 CDMA system operates in the same frequency band as the AMPS using 
frequency division duplex (FDD) with 25 MHz in each direction.” The uplink (mobile 
to base station) and downlink (base station to mobile) bands use frequencies from 
869 to 894 MHz and from 824 to 849 MHz, respectively. The mobile station supports 
CDMA operations on the AMPS channel numbers 1013 through 1023, 1 through 
311, 356 through 644, 689 through 694, and 739 through 777, inclusive. The CDMA 
channels are defined in terms of an RF frequency and a code sequence. Sixty-four Walsh 
codes (see Appendix D) are used to identify the forward channels, whereas unique long 
PN code offsets are used for the identification of the reverse channels. The modulation 
and coding features of the IS-95 CDMA system are listed in Table 11.9. 

Modulation and coding details for the forward and reverse channels differ. 
Pilot signals are transmitted by each cell to assist the mobile radio to acquire and 
track the cell site downlink signals. The strong coding helps these radios to oper- 
ate effectively at an Ep/Nọ ratio of a 5 to 7 dB range. 

The CDMA system (IS-95) uses power control and voice activation to mini- 
mize mutual interference. Voice activation is provided by using a variable rate vocoder 
(see Chapter 8) which for Rate set 1 codec operates at a maximum rate of 8kbps to a 


* The frequency spectrum for the A-System cellular service provider is split such that the spectrum is not 
divisible by 1.25 MHz. Thus the A-System cellular provider cannot partition the spectrum into ten 1.25 
CDMA channels. This restriction is not imposed for the B-System, however. 
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Table 11.9 Modulation and coding feature of IS-95 CDMA system. 


Modulation Quadrature phase-shift keying (OPSK) 
Chip rate 1.2288 Mcps 

Nominal data rate 9600 bps, full rate with Rate Set 1 
Filtered bandwidth 1.25 MHz 

Coding Convolution with Viterbi decoding 
Interleaving With 20-msec span 


minimum rate of 1kbps, depending on the level of voice activity. With the decreased 
data rate, the power control circuit reduces the transmitter power to achieve the same 
bit error rate. A precise power control, along with voice activation circuit, is critical to 
avoid excessive transmitter signal power that is responsible for contributing the overall 
interference in the system. The Rate set 2 coding algorithms at 13kbps are also sup- 
ported. 

A bit-interleaver with 20 тес span is used with error-control coding to 
overcome multipath fading and shadowing (see Chapter 3). The time span used is 
the same as the time frame of voice compression algorithm. 

A Rake receiver used in the CDMA radio takes advantage of a multipath 
delay greater than 1 ps, which is common in cellular/personal communication 
service networks in urban and suburban environments. 


11.13.1 Downlink (Forward) (BS to MS) 

The downlink channels include one pilot channel, one synchronization (synch) 
channel, and 62 other channels including up to 7 paging channels. (If multiple 
carriers are implemented, paging channels and synch channels do not need to 
be duplicated). The information on each channel is modulated by the appropriate 
Walsh code and then modulated by a quadrature pair of PN sequences at a fixed 


`N 


PN 
Coherent Carrier Walsh / 
cos (2r fot) 


Figure 11.15 Application of PN sequence and Walsh code in CDMA. 
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Figure 11.16 Forward traffic channel. 


chip rate of 1.2288 Mcps (see Figure 11.15). The pilot channel is always assigned 
to code channel number zero. If the synch channel is present, it is given the code 
channel number 32. Whenever paging channels are present, they are assigned the 
code channel numbers 1 through 7 (inclusive) in sequence. The remaining code 
channels are used by forward traffic channels (see Figure 11.16). 

The synch channel operates at a fixed data rate of 1200 bps and is convolu- 
tionally encoded to 2400 bps, repeated to 4800 bps, and interleaved. 

The forward traffic channels are grouped into sets. Rate set 1 has four rates: 
9600, 4800, 2400, and 1200bps. Rate set 2 contains four rates: 14,400, 7200, 
3600, and 1800 bps. All radio systems support Rate set 1 on the forward traffic 
channels. Rate set 2 is optionally supported on the forward traffic channels. When 
a radio system supports a rate set, all four rates of the set are supported. 

Speech is encoded using a variable rate vocoder (see Chapter 8) to generate 
forward traffic channel data depending on voice activity. Since frame duration is 
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fixed at 20ms, the number of bits per frame varies according to the traffic rate. 
Half rate convolutional encoding is used, which doubles the traffic rate to give rates 
from 2400 to 19,200 bits per second. Interleaving is performed over 20 ms. A long 
PN code of 2? — 1 (= 4.4 х 10'?) is generated using the user's electronic serial 
number (ESN) embedded in the mobile station long code mask (with voice privacy, 
the mobile station long code mask does not use the ESN). The scrambled data is 
multiplexed with power control information which steals bits from the scrambled 
data. The multiplexed signal on the traffic channel remains at 19,200 bps and is 
modulated at 1.2288 Mcps by the Walsh code, W;, assigned to the ith user traf- 
fic channel. The signal is spread at 1.2288 Mcps by quadrature pseudo-random 
binary sequence signals, and the resulting quadrature signals are then weighted. 
The power level of the traffic channel depends on its data transmission rate. 

The paging channel data is processed in a similar manner to the traffic chan- 
nel data. However, there is no variation in the power level on a per frame basis. 
The paging channels provide the mobile stations with system information and 
instructions, in addition to acknowledging messages following access requests on 
the mobile stations’ access channels. The 42-bit mask is used to generate the long 
code. The paging channels operate at a data rate of 9600 or 4800 bps. 

All 64 channels are combined to give single I and O channels. The signals 
are applied to quadrature modulators and resulting signals are summed to form a 
QPSK signal, which is linearly amplified. 

The pilot CDMA signal transmitted by a base station provides a reference for 
all mobile stations. It is used in the demodulation process. The pilot signal level for 
all base stations is much higher (about 4 to 6 dB) than the traffic channel. The pilot 
signals are quadrature pseudo-random binary sequence signals with a period of 
32,768 chips. Since the chip rate is 1.2288 Mops, the pilot pseudo-random binary 
sequence corresponds to a period of 26.66 ms, which is equivalent to 75 pilot 
channel code repetitions every 2 seconds. The pilot signals from all base stations 
use the same pseudo-random binary sequence, but each base station is identified 
by a unique time offset of its pseudo-random binary sequence (short code). These 
offsets are in increments of 64 chips providing 512 unique offset codes. These large 
numbers of offsets ensure that unique base station identification can be obtained, 
even in a dense microcellular environment. 

A mobile station processes the pilot channel to find the strongest multipath 
signal components. The processed pilot signal provides an accurate estimation 
of time delay, phase, and magnitude of the multipath components. These com- 
ponents are tracked in the presence of fast fading, and coherent reception with 
combining is used. The chip rate on the pilot channel and on all frequency 
carriers is locked to precise system time by using the global positioning system 
(GPS). Once the mobile station identifies the strongest pilot offset by processing 
the multipath components from the pilot channel correlator, it examines the sig- 
nal on its synch channel which is locked to the pseudo-random binary sequence 
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signal on the pilot channel. Since the synch channel is time aligned with its base 
station’s pilot channel, the mobile station finds the information pertinent to 
this particular base station. The synch channel message contains time-of-day 
and long code synchronization to ensure that long code generators at the base 
station and mobile station are aligned and identical. The mobile station now 
attempts to access the paging channel and listens for system information. The 
mobile station enters the idle state when it has completed acquisition and syn- 
chronization. It listens to the assigned paging channel and is able to receive and 
initiate calls. 


11.13.2 Uplink (Reverse) (MS to BS) 

The uplink channel is separated from the downlink channel by 45 MHz at cellular 
frequencies and 80 MHz at PCS frequencies (1.8 to 1.9 GHz). The uplink uses the 
same 32,768 chip code as is used on the downlink. The two types of uplink chan- 
nels are the access channel and reverse traffic channels (see Figure 11.17). The 
access channel enables the mobile station to communicate nontraffic information, 
such as originating calls and responding to paging. The access rate is fixed at 
4800 bps. All mobile stations accessing a radio system share the same frequency 
assignment. Each access channel is identified by a distinct access channel long 
code sequence having an access number, a paging channel number associated with 
the access channel, and other system data. Each mobile station uses a different 
PN code; therefore, the radio system can correctly decode the information from 
an individual mobile station. Data transmitted on the reverse traffic channel is 
grouped into 20 ms frames. All data on the reverse traffic channel is convolu- 
tionally encoded, symbol repeated, block interleaved, and modulated by Walsh 
symbols transmitted for each six-bit symbol block. The symbols are from the set 
of the 64 mutually orthogonal waveforms. 

The reverse traffic channel for Rate set 1 may use either 9600, 4800, 2400, 
or 1200 bps data rates for transmission. The transmission varies proportionally 
with the data rate, being 100% at 9600 bps to 12.5% at 1200 bps. An optional 
second rate set is also supported in the PCS version of CDMA and new versions of 
cellular CDMA. The actual burst transmission rate is fixed at 28.8 ksps. Since six 
code symbols are modulated as one of 64 modulation symbols for transmission, 
the modulation symbol transmission rate is fixed at 4800 modulation symbols per 
second. This results in a fixed Walsh chip rate of 307.2 kcps. The rate of spreading 
PN sequence is fixed at 1.2288 Mcps, so that each Walsh chip is spread by 4 PN 
chips. Table 11.10 provides the signal rates and their relationship for the various 
transmission rates on the reverse traffic channel. 

Following orthogonal spreading, the reverse traffic channel and access 
channel are spread in quadrature. Zero-offset I and O PN sequences are used 
for spreading. These sequences are periodic (short code) with 32,768 PN chips in 
length and are based on characteristic polynomials gi(x) and go(x). 
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Figure 11.17 Reverse traffic channel. 
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Table 11.10 CDMA reverse traffic channel modulation parameters (rate set 1). 


Parameter 9600 bps 4800 bps 2400 bps 1200 bps Units 

PN chip rate 1.2288 1.2288 1.2288 1.2288 Mcps 

Code rate 1/3 1/3 1/3 1/3 bits per code 
symbol 

Transmitting 100 50 25 12.5 % 

duty cycle 

Code symbol 3 x 9600 = 28,800 28,800 28,800 symbol per 

rate 28,800 second 

Modulation 6 6 6 6 code symbol 
per mod. 
symbol 

Modulation 28,800/6 = 4800 4800 4800 symbol per 

symbol rate 4800 second 

Walsh chip 64 x 4800 = 307.2 307.2 307.2 kcps 

rate 307.2 

Mod. symbol 1/4800 = 208.33 208.33 208.33 ps 

duration 208.33 

PN chips/ 12,288/288 = 42.67 42.67 42.67 PN chip per 

code symbol 42.67 code symbol 

PN chips/ 1,228,800/ 256 256 256 PN chip per 

mod. symbol 4800 = 256 mod. symbol 

PN chips/ 4 4 4 4 PN chips per 

Walsh chip Walsh chip 


The maximum-length linear feedback register sequences I(n) and O(n), 
based on these polynomials, have a period of 215—1 and are generated by using 
the following recursions: 


Ци) = Қи — 15) @ Ци — 8) Ф Ци — 7) © (я — 6) Ф Қи —2) (11.34) 


based on g;(x) as the characteristic polynomial, and 


Q(n) = q(n — 15) © q(n — 12) Oa(n — 11)  q(n — 10) 
@ q(n — 9) Ð qin — 5) © qin — 4) Ð a(n — 3) (11.35) 


based on qo(x) as the characteristic polynomial, where I(z) and О(и) are binary 
numbers (0 and 1) and the additions are modulo-2. 
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To obtain the I and О sequences, а 0 is inserted in I(n) and O(n) after 14 
consecutive 0 outputs (this occurs only once in each period). Therefore, the short 
PN sequences have one run of 15 consecutive 0 outputs instead of 14. 

The chip rate for the short PN sequence is 1.2288 Mcps and its period is 
26.666 ms. There are exactly 75 repetitions in every 2 seconds. The spreading 
modulation is OQPSK (see Figure 11.18). The data spread by O PN sequence is 


cos(2mf,t + 7/4) 


» sin(2uf,t + 7/4) 


> sin(2nf.t + 1/4) 


Figure 11.18 Signal constellation and phase transition of OOPSK and OPSK. 
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delayed by half a chip time (406.901 ns) with respect to the data spread by I PN 
sequence. Table 11.11 describes the characteristics of OQPSK. 

Table 11.12 defines the signal rates and their relationship on the access 
channel. Each base station transmits a pilot signal of constant power on the same 
frequency. The received power level of the pilot signal enables the mobile sta- 
tion to adjust its transmitted power such that the base station will receive the 
signal at the requisite power level. The base station measures the mobile station’s 
received power and informs the mobile station to make the necessary adjustments 
to its transmitter power. One command every 1.25 ms allows to adjust the trans- 
mitted power from the mobile station in steps of +1dB. The base station uses 
frame errors reported by the mobile station to increase or decrease its transmitted 
power. 

In summary, an 15-95 CDMA system operates with a low E,/No ratio, exploits 
voice activity and uses the same frequency in all sectors of all cells. Each sector has 


Table 11.11 Reverse CDMA channel 
Гапа О mapping. 


I Q Phase 
0 0 7/4 

1 0 (30)/4 

1 1 —(3«)/4 
0 1 т/4 


Table 11.12 CDMA access channel modulation parameters. 


Parameter 4800 bps Units 

PN chip rate 1.2288 Mcps 

Code rate 1/3 bits/code symbol 
Code symbol repetition 2 symbols/code symbol 
Transmit duty cycle 100 % 

Code symbol rate 28,800 sps 

Modulation 6 code symbol/mod. symbol 
Modulation symbol rate 4800 sps 

Walsh chip rate 307.2 kcps 

Mod. symbol duration 208.33 ps 

PN chips/code symbol 42.67 PN chip/code symbol 
PN chips/mod. symbol 256 PN chip/mod. symbol 


PN chips/Walsh chip 4 PN chips/Walsh chip 
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up to 64 CDMA channels on each carrier frequency. It is a synchronized system with 
Rake receivers to provide path diversity at the mobile station and at the cell site. 


11.14. Power Control in CDMA 
A proper power control on both the uplink and downlink has several advantages: 


* System capacity is improved or optimized. 
* Mobile battery life is extended. 


Radio path impairments are properly compensated for. 


Quality of service (QoS) at various bit rates can be maintained. 


The reverse link (uplink) uses a combination of open loop and closed 
loop power control to command the mobile station to make power adjust- 
ments (see Figure 11.19). 

The mobile station and the base station receiver measure the received power 
and use the measurements to maintain a power level for adequate performance. 
The mobile unit measurement is part of the open loop power control while the 
base station measurement is part of the closed loop power control. In the closed 
loop mode, the mobile station transmitter power is controlled by a signal from 
the base station site. Each base station demodulator measures the received SNR 
for that mobile station and sends a power command either to increase or decrease 
mobile station power. The measure-command-react cycle is performed at a rate of 
800 times per second for each mobile station in IS-95. 

The power adjustment command is combined with the mobile's open loop 
estimate and the result is used to adjust the transmitter gain. This solves the near- 
far interference problem, reduces interference to other mobiles using the same 
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Figure 11.19 Power control in CDMA. 
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CDMA radio channel, helps to overcome fading, and conserves battery power іп 
portable and mobile units. 

On the uplink, the objective of the mobile station is to produce a nominal 
received power signal at the base station receiver. Regardless of the mobile’s posi- 
tion or propagation loss, each mobile should be received at the base station with 
almost the same power level. If the mobile’s signal arrives at the base station with 
a lower power level than the required power level, its error rate performance will 
be high. On the other hand, if the mobile’s signal is too high, it will interfere with 
other users with the same CDMA radio channel causing performance degradation 
unless the traffic load is decreased. 

Similarly, a combination of open loop and closed loop power control is 
used on the forward link (downlink) to keep SNR at the mobile almost constant. 
Forward link power control mitigates the corner problem. Mobiles at the edges 
of cells normally require more power than those close to the center of the base 
station for two reasons: more transmission loss and more interference from adja- 
cent base stations. This is known as the corner problem. Forward link power 
control minimizes interference to mobiles in the same base station (in multipath 
environments) as well as mobiles in other base stations. Using the downlink power 
control, the base station transmits the minimum required power, hence, minimizes 
the interference to mobiles in the surrounding base stations. 

The outer loop power control is the finer power control over the closed loop 
power control. It adjusts the target signal-to-interference ratio (SIR) in the base sta- 
tion according to the needs of the individual radio links and aims at a constant qual- 
ity, which is usually defined as a certain target bit error rate (BER) or frame error 
ratio (FER). The required SIR depends on the mobile speed and multipath profile. 
The outer loop power control is typically implemented by having the base station to 
each uplink user data frame with frame quality indicator, such as a cyclic redundancy 
check (CRC) result, obtained during decoding of the particular user data frame. 


11.14.1 Open Loop Power Control 
In the open loop power control, the mobile uses the received signal to estimate the 
transmission loss from the mobile unit and the base station. 


T(r) = 10log® (11.36) 
t 


L(r) = T(r) - С, - С, (11.37) 


p: = transmitter's power output 
— received power at distance r from the transmitter 
С, = antenna gain of transmitter 
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2 
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С, = antenna gain of receiver 
L(r) = path loss at distance r 
T(r) = reverse link transmission power at distance r 


This estimate is used to allow a rapid response to a sudden improvement in the 
channel while disallowing a rapid response to a sudden degradation in the channel. 
This is important because if the channel for one mobile unit suddenly improves, 
then the signal received at the base station from this mobile unit suddenly increases 
in power and causes additional interference to all other mobiles sharing the same 
CDMA channel. The approach to solve this problem is to tolerate a temporary 
degradation in one mobile unit performance in order to prevent degradation of all 
mobile units. The signal-to-noise ratio for the mobile at distance r is given as: 


рү (r) T(r) 
(NoBiw)cell T (Mff. ш 1) ` vi ý pir) T(r) 


SNR(r) = (11.38) 


where: 


p7'(r) = mobile power amplifier output 
T(r) = reverse link transmission power at distance r 
M = number of users per cell 
vf = channel activity factor 
f, = frequency reuse efficiency 
(№оВ,,)сеп = cell thermal noise 


The mobile estimates the T(r) from its measurements of the total received 
power and the prior knowledge of the base station power amplifier output. The 
total received power can be expressed as: 


pr(r) = pr: T(r) + (NoBw) 


t 


АОВ = (ore, + espe e Ee) | 4В (11.39) 


cell 


P¢ = base station power amplifier output (dB) 
Рт) = mobile received total power (dB) 
Ioc = spectral density of interference from other cells (dBm/Hz) 
ёт = ratio of power from other cells to power from the mobile's home cell 
& = ratio of thermal noise to power from mobile’s home cell 
B, = bandwidth (Hz) 


To minimize the power transmitted by each mobile, (SNR)min for all reverse 
channels should be maintained. 


SNR = Be ^E) (11.40) 
"^ (N Bu) + (Mff, — Die pz) - Lir 
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p”(r) ж 
+E +) pe 
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N,B Mif) - 1) = 
(МВ) + (Mfr) UFE TE Р 


There are two extreme cases: 


* The mobile is close to its base station in this case, the total received power 
is mainly due to its base station and 


Lir) = (рур 


* The mobile is close to the edge of its base station; in this case the total 
received power is the contribution of more than one base station. Worst 
case conditions are when the mobile is equidistant from three adjacent base 
stations. Assuming that all base stations transmit the same power, then 


(1(+ё&+ё,)=3 


The quantity 


zara. CBE а 
(NoBu) + (М) — Vos: pri c E EE 


depends only on base station loading 


((M/f,) = 1): ve prr) prr) TER 


1+ E NE 
(NoBw) (1+ &i+&)-pp т-р 


where: 


р = cell loading = М/М „ах 
M = number of users in the cell 
Mmax = maximum capacity of the cell 


SNR... = pr'(r) + per) — p; — 10log(1 + & +) = (МВ) д 
+ 10log(1 — р) dB (11.42) 


In order to maintain a constant SNR at the base station, the mobile should transmit 
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рт) = (SNR). + PE + (МВ) у — 10log(1 — р) + 10log(1 + £, + £j) 


cel 


— pi(r) dB (11.43) 


E 
prr) = e — 10log G, +р + (N Bw) = 10log(1 — p) + 10log(1 JEDE é) 


cel 
t 


= prr (11.44) 
pir) = K = prir) dB (11.45) 
where: 


- E 
К = s = 10log G, + pi + (NoBw) on —10log(1 — р) + 10log(1 + & + ё,) 


ce. 
t 


As an example, let us consider 15-95, in which: Gp = 128, Ej/N, = 7 dB, 
р“ = 25 watts, No = —174dBm/Hz, В, = 1.23MHz, р = 0.5, cell noise 
figure № = 4dB, 1 + & + & = 2, then (К) = —73dB (Note: this value is used in 
Example 11.7). 


p7(r) = —73 — p?'(r) dB (11.46) 


The constant (K) is the part of the broadcast message that is sent to the 
mobile by the base station on the paging channel. The speed at which the open 
loop power control tracks the changes in the channel depends on the time con- 
stant of the automatic gain control (AGC) filter. 


Example 11.7 

An IS-95 CDMA mobile measures the signal strength from the base stations as 
—97 dBm, what should the mobile transmitter power be set to as a first approx- 
imation? After the connection is made with this power level, the base station 
requires the mobile station to change its power to +18dBm. How long would it 
take for the mobile station to make this change? 


Solution 


рт) = K — pr'(r) = —73 — pr) = —73 — (-97) = 24dBm 


Power reduction = 24 — 18 = 6dBm 
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Mobile requires 6 decrements each at 1.25 ms (1/800 sec) 
-. Time required = 6 X 1.25 = 7.5ms 


11.15 Softer and Soft Handoff 


During soft handoff, a mobile station is in the overlapping cell coverage area 
of two sectors belonging to two different base stations. The communications 
between mobile station and base station occur concurrently via two air interface 
channels from each base station separately. Both channels (signals) are received 
at the mobile station by maximal combining Rake processing (see Figure 11.20). 
Soft handoff occurs in about 20-40% of calls. 

Soft handoffs are an integral part of CDMA design. The determination of 
which pilots will be used in the soft handoff process has a direct impact on the 
quality of the call and the capacity of the system. Therefore, setting soft handoff 
parameters is a key element in the system design for CDMA. 

In the uplink direction, soft handoff differs significantly from softer handoff: 
the code channel of the mobile station is received from both base stations, but the 
received data is routed to the base station controller (BSC) for combining. This is 
done so that the same frame reliability indicator as provided for outer loop power 
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Figure 11.20 Soft handoff in CDMA. 
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control is used to select the better frame between two possible candidates within 
the BSC. 


A brief description of each type of pilot set is given below: 


The active set is the set of pilots associated with downlink traffic channels 
assigned to the mobile units. The active set can contain more than one pilot 
because a total of three carriers, each with its own pilot, could be involved 
in a soft handoff process. 


The candidate set consists of the pilots that the mobile unit has reported 
are of a sufficient signal strength to be used. The mobile unit also promotes 
the neighbor set and remaining set pilots that meet the criteria to the can- 
didate set. 

The neighbor set is the list of the pilots that are not currently on the active 
or candidate pilot lists. The neighbor set is identified by the base station via 
the neighbor list and neighbor list update messages. 

The remaining set contains all possible pilots in the system that can pos- 
sibly be used by the mobile unit. However, the remaining set pilots that the 
subscriber unit looks for must be a multiple of Pilot Inc. 


The parameters used to control the movement of a pilot from a neighbor to 


a candidate, to active, and then back to neighbor set are given below: 


1. Pilot strength exceeds T. ADD and the mobile unit sends a pilot strength 


measurement message (PSMM) and transfers the pilot to the candi- 
date set. 

. The pilot strength drops below T DROP and the mobile unit begins the 
handoff drop time (T TDROP). 

. T COMP is used into decision matrix for adding and removing pilots from 
the neighbor, candidate, and active set. 


For more details about power control and soft handoff in CDMA, refer to [5]. 


Example 11.8 
Given the current active set contains pilots P1, P2, P3, and P4. At a particular 


time, 


the mobile station measures the signal strength of P1, P2, P3, and P4 as 


—95 dBm, —100 dBm, —101 dBm, and —105 dBm, respectively. Pilot PS is in the 
candidate set. The mobile station measures P5 signal strength as — 102 dBm at the 
same time. Determine a possible pair of the SOFT-SLOPE and ADD-INTERCEPT 
values that will trigger the mobile station to send a PSMM to the base station. 
The mobile station is IS-95B compliant and uses the following criterion to add the 


pilot 


from the candidate set to the active set. 
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10log (P) = Max 


N, 


> P 


1= 1 


(SOFT-SLOPE) х 10log + (ADD-INTERCEPT) 


d Tapp 


where: 


Ре; = received power of the jth pilot in the candidate set 
Pai = received power of the ith pilot in the active set 
N, = number of pilots in the active set 
Tapp = threshold for adding a pilot from the candidate set into the active 
set 


Also, if the mobile station is IS-95 compliant, find the value of T-COMP that 
could trigger the mobile station to generate a PSMM. Assume mobile receiver 
sensitivity, i.e., noise power = —107dBm апа Tapp = — 13 dB. 


Solution 
(a) 
Ра = P1 — Receiver Sensitivity = —95 — (—107) = 12dBm 
Ра = P2 — Receiver Sensitivity = —100 — (—107) = 7dBm 
Раз = P3 — Receiver Sensitivity = —101 — (—107) = 6dBm 
Раа = P4 — Receiver Sensitivity = —105 — (—107) = 2dBm 
Р; = —102 — (-107) = 5dBm 


101ов [1012 + 1097 + 1096 + 1092] = 14.22 


-. (Max (14.22 x (SOFT-SLOPE) + (ADD-INTERCEPT), —13} = 5) 
Thus, we have the following two relations: 
14.22 X SOFI-SLOPE + ADD-INTERCEPT > —13 
and 
14.22 X SOFT-SLOPE + ADD-INTERCEPT x 5 


Solving these equations, we get SOFT-SLOPE = 0.5 and ADD-INTERCEPT 
= —4 
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(b) 


For an IS-95-compliant mobile station 


(P.—P.) = 0.5 x T-COMP 


Since P1 > P2 > P3 > P4, we replace P4 
[7102 — (-105)] > 0.5 x T-COMP 


T-COMP x 6dB x 4 


11.16 Summary 

In this chapter we first discussed the concept of spread spectrum systems and 
provided the main features of the direct sequence spread spectrum and frequency 
hop spread spectrum systems. A key component of spread spectrum performance 
is the calculation of the processing gain of the system, which is the relation- 
ship between the input and output signal-to-noise ratio of a spread spectrum 
receiver. 

Spread spectrum systems trade bandwidth for processing gain, and code 
division systems use a variety of orthogonal or almost orthogonal codes to allow 
multiple users in the same bandwidth. Thus, CDMA systems can have a higher 
capacity than either analog or time division multiple access (TDMA) digital sys- 
tems. However, because of practical constraints on CDMA systems, it is not 
possible to achieve the Shannon bound in system design. The upper bound of 
the capacity of a CDMA system is limited by the processing gain of the system, 
receiver modulation performance, power control accuracy, interference from 
other cells, voice activity, cell sectorization, and the ability to maintain accurate 
synchronization of the system. 

We concluded the chapter by discussing the high level features of the IS-95 
system and listing the challenges in implementing a CDMA system. Two impor- 
tant aspects of the CDMA system, power control and softer and soft handoff, 
were also discussed. 


Problems 
11.1 Define open loop, closed loop, and outer loop power control. 


11.2 What are the softer and soft handoffs? 

11.3 Differentiate between scrambling and spreading. 

11.4 What are the requirements for a DSSS? 

11.5 What are the basic differences between the DSSS and FHSS systems? 


Problems 


11.6 


11.7 


11.8 


11.10 


11.11 


11.12 
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Which parameters are used to control the movements of the pilot in a 
CDMA system? 


How many times are power adjustments performed in ап 15-95 СОМА 
system? 


Determine (S/N), for a spread spectrum system having bandwidth, 
By = 1.2288 MHz, information rate, К = 9.6kb/s and (S/N); = 15 dB. 
Relate your result to Ep/No. 


Use the data in Example 11.6 and show that the bit pattern at mobile 2 
and 3 can be determined from the demodulated signal using Path 1 and 
Path 2. 


Consider a case where eight chips per bit are used to generate the Walsh 
codes (see Appendix D). Mobile stations A, B, C, and D are assigned W1, 
W2, W3, and W4, respectively. The stations use the Walsh code to send a 
“1” binary bit and use negative Walsh to send a “0” binary bit. Assume 
all stations are synchronized in time; therefore, chip sequences begin at 
the same instant. When two or more stations transmit simultaneously, 
their bipolar signals add linearly. Consider the following four different 
cases when one or more stations transmit and show that the receiver 
recovers the bit stream of stations B and C. (Note: dash (—) means no 
transmission by the station). 


Station (A, B, C, D) Transmitting Stations 
——10 C+D 

111- A+B+C 

11-- A+B 

1100 A+B+C+D 


An IS-95 CDMA mobile measures the signal strength from the base 
station as — 100 dBm, what should the mobile transmitter power be set 
to as a first approximation? 


Given the current active set contains pilots P1, P2, P3, and P4. At a 
particular time, the mobile station measures the signal strength of P1, 
P2, P3, and P4 as —98dBm, —101dBm, —103dBm, and —104dBm, 
respectively. Pilot P5 is in the candidate set. The mobile station measures 
P5 signal strength as —103 dBm at the same time. Determine a possible 
value of the SOFT-SLOPE, that will cause the mobile station to send a 
PSMM report to the base station, if the ADD-INTERCEPT value is —4. 
The mobile station is IS-95B compliant and uses the following criterion 
to add the pilot from the candidate set to the active set. 
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10 log (P.j) = Max 
Na 
(SOFT-SLOPE) х 10 log Ps Р + (ADD-INTERCEPT) |, Tapp 
i=1 
where: 


Р; = received power of the jth pilot in the candidate set 
Pai = received power of the ith pilot in the active set 
N, = number of pilots in active set 


Tapp = threshold for adding a pilot from the candidate set into the active set 


Assume mobile receiver sensitivity i.e., noise power = — 106 dBm апа Tapp = 
—14 dB. 

11.13 Also, if the mobile station is IS-95 compliant in Problem 11.12, find the 
value of T-COMP that could cause the mobile station to generate a РММ 
report. 
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CHAPTER 12 


Mobility Management in 
Wireless Networks 


12.1 Introduction 

Mobility is important in mobile communication [1-3]. It can be categorized as 
radio mobility and network mobility. Radio mobility is mainly concerned with 
the handoff process, whereas network mobility mainly deals with mobile location 
management (i.e., location updating and paging). As mobiles travels across system 
boundaries, whether they are cell, location, or a mobile switching center (MSC) 
areas, the network must be able to locate the mobile subscriber and automatically 
route the call to him or her [4-6]. Security mechanisms, such as subscriber identity 
authentication and equipment validation (discussed in Chapter 13) provide a level 
of protection against fraud to subscribers and service providers [8,13]. 

The public land mobile network (PLMN) is an integrated service digital 
cellular network providing wireless access for mobile subscribers to other net- 
works and network services, including other PLMNs. A PLMN area is divided into 
regions called location areas (LAs). Each LA is made up of one or more cell areas. 
A mobile station (MS) registers with the visitor location register (VLR) each time 
it enters a new LA. The mobile station is free to move inside a given LA without a 
registration (see Figure 12.1). Each cell has a unique identification number called 
a cell global identification (CGI), which contains location area identification (LAT) 
and cell identification (CI) (see Figure 12.2) [10-12]. The LAI consists of mobile 
country code (MCC), mobile network code (MNC), and location area code (LAC). 
The CI is a specific cell identity within a given location area [7]. 

Mobility management in wireless networks is the primary set of functions 
that are supported by the network to enable subscriber mobility. Mobility man- 
agement enables the network to keep track of the subscriber's status and location 
to deliver calls to that subscriber. It also enables the network to authorize a sub- 
scriber for service in a given service area. The key component to mobility man- 
agement is the subscribers' service profile. The service profile is a database record 
in the network that contains information about each subscriber. This informa- 
tion includes dynamic data such as current location and status of a subscriber as 
well as permanent data such as the service profile, international mobile subscriber 
identity (IMSI), and so on of a subscriber. 
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Location Area 1 


Figure 12.1 Wireless PLMN. 


LAI 


Figure 12.2 Cell global identification. 


12.2 Mobility Management Functions 
Mobility management generally deals with automatic roaming, authentication, 
and intersystem handoff. 

Automatic roaming includes a set of network functions that allow a subscriber to 
obtain service outside the home service provider area. These functions are automatic 
and do not require special subscriber actions. The automatic roaming functions are 
divided into: 


Mobile station (MS) service qualification 


MS location management 


MS state management 


Home location register (HLR), and VLR fault recovery 


The authentication process requires that end users of the system are authenticated, 
i.e., the identity of each subscriber is verified (see Chapter 13). 
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Handoff is one of the essential features that guarantees the subscriber mobility 
in a mobile network, where the subscriber can move around. Maintaining connec- 
tion with a moving subscriber is possible with the help of the handoff function. The 
basic concept is simple: when the subscriber moves from the coverage area of one 
cell to another, a new connection with the target cell has to be set up and connection 
with the old cell may be released. Controlling the handoff mechanism is, however, 
quite a complicated issue in cellular systems. 


12.3 Mobile Location Management 

Location management schemes are based on subscribers’ mobility and incoming 
call rate characteristics. Using the location update (LU) procedure the network 
keeps track of the mobile subscriber’s location to direct the incoming call. 

The paging process transmits paging messages to all those cells where mobile 
terminals can be located. There is a trade-off between the LU cost and paging 
cost. If the LU cost is high, the paging cost will be low, as paging is performed 
over a small area. On the other hand, if the LU cost is low, the paging cost will be 
high, as paging is performed over a wider area. 

Location management uses either the periodic LU or the LU-on-LA-crossing. 
The VLR stores the LAI, and the HLR keeps the VLR identifier. In the periodic 
LU method, an MS periodically sends its identity to the network. The draw- 
back of this method is its resource consumption. As an example, if the mobile 
subscriber does not move from an LA for several hours, resources are consumed 
unnecessarily. 

In the LU-on-LA-crossing method, each base station (BS) periodically broadcasts 
the identity of its LA. The MS is required to regularly listen to network broadcast 
information and store the current LA identity if the received identity differs from the 
one stored in the MS. An LU procedure is automatically triggered by the MS. The 
advantage of this method is that it requires LUs only when the MS actually moves. 
A highly movable mobile generates a large number of LUs, a low mobility mobile 
triggers only a few. 

A hybrid location management scheme combines the two methods. The MS 
generates its LU each time it detects an LA crossing. However, if no communica- 
tion has occurred between the MS and the network for a specified duration of 
time, the MS generates an LU. This is a periodic LU that typically allows the 
network to recover subscriber location data in case of a database failure. 

Generally LU procedures involve intra-VLR LU, inter-VLR LU using 
temporary mobile subscriber identity (TMSI), inter-VLR LU using IMSI, and the 
IMSI-attached procedure that is triggered when the mobile is powered on in the 
LA where it was powered off. To minimize the location management cost (i.e., 
LU plus paging traffic processing), the LA must be carefully designed by using a 
proper subscriber mobility model discussed next. 


372 12 Mobility Management in Wireless Networks 


12.3.1 Mobility Model 
A mobility model describes the occurrence of procedures such as LU and handoff. 
Several models have been proposed. 


* Fluid model: This model assumes traffic flow to be like the flow of a fluid. 
The model suggests that the amount of traffic flowing out of an area is 
proportional to the population density of the area, the average velocity of 
movement, and the length of the area boundary. For an area, the average 
number of crossings per unit time is given as: 


= (12.1) 


where: 
= number of crossings per unit of time 
p = average population density 
v = average movement velocity in the area 
L = perimeter of the area 


One of the limitations of the fluid model is that it describes aggregate traffic 
and is difficult to apply to situations where individual movement patterns are 
desired. The fluid model is more applicable to areas with a large population 
because it uses the average population density and the average movement velocity 
of the area. 


* Markovian model: This is also known as the random walk model. The 
Markovian model describes individual movement. In this model, a mobile 
subscriber either remains within the region or moves to an adjacent region 
according to a transition probability distribution. One of the limitations of 
this model is that there is no concept of trips. 


Gravity model: Variations of the gravity model have been employed in 
transportation research to model human movement behavior. Gravity 
models have been applied to regions of varying sizes, from city models to 
national and international models. The main difficulty in using the gravity 
model is that many parameters are required in the calculations; it is there- 
fore difficult to model geography with many regions. 


Next, we show an application of the simple mobility model based on the 
fluid flow concept for a wireless network in an urban area with small cells and 
high user density. We evaluate the impact of LUs on RF resource occupancy at the 
network level and determine the number of transactions processed by MSC/VLR 
[9]. The transaction is defined here as the message received or transmitted by the 
MSC/VLR. Assumptions used in our calculations are: (1) cells are hexagonal, 
(2) maximum blocking probability is 1%, (3) mobiles are uniformly distributed 
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in the cell area, and (4) movements of the mobiles are uncorrelated; the directions 
of their movements are uniformly distributed over 0 to 27. 
The optimal number of cells (Мер) per LA is given as: 


_ | Cage ‚оъ 
Nopt E Сй aR (12.2) 
where: 
Cpage = cost of paging (in terms of the number of paging messages required 


to find an MS) 
Сүр = cost of LUs (in terms of the number of LU messages required to 
update the location of an MS) 
R = cell radius 
v = mean mobile velocity in LA 


Using Equation 12.1 for number of LUs, X, in an LA perimeter of the jth cell 
per hour will be: 


; | vpL 
Mg == (12.3) 
where: 
1 1 ; . 
L=6R\|=+ , length (km) of the cell exposed perimeter in an LA 
| арР (Кт) posed р 


К = cell radius (km) 
N, = number of cells per location area 
p = mobile density in the cell (mobiles per km?) 


The resource occupancy Rig in the jth cell due to MS LUs is given as: 


(12.4) 


jk . tk 
2. Pit tiu 


pik, = percent of LUs in the kth case for the jth cell 


i. = average duration of an LU in the kth case (k = 1: intra-VLR; k = 2: 
| inter-VLR with TMSI; and ё = 3: inter-VLR with IMSI) 
№ y = number of transactions processed by MSC/VLR in an LA perimeter 


of the jth cell per hour 
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Table 12.1 Number and duration of transaction for different LU types. 


Transaction type Number of transaction/LU Duration of a transaction 
Intra-VLR LU 2 600 ms 
Inter-VLR LU with TMSI 14 3500 ms 
Inter-VLR LU with IMSI 16 4000 ms 


The total number of transactions due to LUs generated in the Nj X №, location 
area perimeter cells (which we number from 1 to № AN;) and processed per hour by 
the MSC/VLR is given as: 


Nia Np 


Т№ = My 2. 
j= 


(12.5) 


where: 
Nia = number of LAs managed by MSC/VLR 


Np = 6 in — 3 = number of cells located on the perimeter of an LA, and 


Example 12.1 


Using the following data for Groupe Special Mobile/Global System for Mobile 
Communications 1800, evaluate the impact of LUs on the radio resource and cal- 
culate the MSC/VLR transaction load using the fluid flow model. 


* Density of mobiles in the cell = 10,000 mobiles/km? 
* Cell radius = 500m 

* Average moving velocity of a mobile = 10 km/hour 
e Number of cells per LA = 10 

* Number of LAs per MSC/VLR = 5 


* Number of transactions and duration of each transaction to MSC/VLR per 
LU for different LU types are given in Table 12.1. 


We consider two cases: (1) an optimistic situation in which generated LUs 
in a cell are only intra-VLR LUs, and (2) a pessimistic situation where generated 
LUs in a cell are inter-VLR LUs. 


Solution 


Case 1: In the first case, the jth cell located at the border of two LAs is related to 
the same MSC/VLR, only intra- VLR LUs are processed in the cell. 


1 1 500 [1 1 
І = 6К|=— + =6 xX + = 1.902km 
E m] 1000 5 2/10 — 3 
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_ wpL _ 10 х 10,000 x 1.902 


My ^ = = = 60,543 LUs per hour 
3 
; ; 60,543(1 x 600/1000) 
= k . şk = , = 
Rig = Mg > Plt 15 m 10.1 Erlangs 


This requires 18 channels at 1% blocking (refer to the Erlang-B table, Appendix A) 


or 18/8 — 2.25 traffic channel (about 1/4 of an RF channel, assuming there are 
8 traffic channels per RF channel). 


Case 2: In this case the jth cell is located at the border of two LAs related to two 
different VLRs. In this case, only inter- VLR LUs will be processed in the cell. We 
assume 80% of LUs are with TMSI and 20% of LUs are with IMSI. 


j^ My 


3600 1000 1000 


3 
Хог 


_ 60,543 10.8 х 3300 + 0.2 х 4000 | _ 60.45 Erlangs 


This requires 75 channels at 1% blocking (refer to the Erlang-B table, Appendix A) 
or 75/8 = 9.38 traffic channels (about 1.25 RFchannels). 


MSC/VLR Transaction Load 


We assume that one LA is in the center of the region and the remaining four LAs 
are on the border of the region. We also assume that, in the perimeter cells at the 
border LAs, only intra-VLR LUs are generated. For half of the perimeter cells at 
the border LAs, only inter-VLR LUs are generated. 


Np = 6 үз e ades Е — 3 = 7.9545 = 8 cells located on the perimeter 
of an LA. 


Number of cells where inter-VLR LUs occur will be: 


05 х4х №=2 х8 = 16 


Number of cells where intra-VLR LUs occur will be: 


4xN,.- 16=4X 10 – 16 = 24 
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Nia Np 3 
=) jk . +k 
TN: = My 25 > Plt Tu 
= = 


= 60,543[2 х 24 + 16(0.8 х 14 + 0.2 х 16)] 


= 16.85 x 106 transactions at peak hour 


Transactions at Peak Hour 


The results show that, under heavy traffic conditions, the impact of LUs can be 
significant. In terms of radio channels used, we find that between 0.25 to 1.25 GSM 
RF carriers can be used for LA boundary crossings. Although this load cannot 
directly cause call blocking on the radio interface (in a GSM1800 network with 
4 X 3 reuse cluster, the average number of RF carriers per cell with 3 operators 
is about 10), it is nevertheless not a negligible impact on traffic channel (TCH), 
consumption. In terms of processing at the MSC/VLR side, with a processing 
load of about 16.85 X 106 transactions per hour, it is obvious that blocking can 
rapidly occur with the given scenario. The MSC/VLR resources dedicated to LU 
processing cannot be used to provide other services. A major concern of opera- 
tors, where objectives are to provide users with rich and sophisticated services, is 
to have more processing resources at the MSC/VLR. 


12.4 Mobile Registration 


The detection of a subscriber in a new serving system is an example of a registration 
event. The registration is a subset of automatic roaming functions. It primarily 
consists of MS service qualification and MS location management. These func- 
tions enable a subscriber to register with the network; that is, to indicate to the 
network location register functional entities the location and status of the MS. 

The registration-related functions generally must be performed before the 
network can provide service to the subscriber; however, there are exceptions, such 
as access to emergency services by dialing 911. 

The process of registering a mobile subscriber is unique to wireless networks. 
The registration is not used for wireline systems because the subscriber location is 
fixed and does not change. The types of registration supported in a network are 
dependent on the protocol used for the air interface between the mobile station 
and radio system and on the algorithms implemented in the serving network. 
The air interface standards for advanced mobile phone systems (AMPS), time 
division multiple access (TDMA), and code division multiple access (CDMA) 
support different types of registration than does GSM. 
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Registration may be initiated by the MS or the network, or may be implied 
during MS access. Upon receiving the registration request from the MS, the radio 
system (base station) constructs the Registration Update Request message and 
sends it to the network (MSC). The Registration Update Request message contains 
the MS’s identification and location information and may contain authorization 
parameters. The network (MSC) may respond with a request for authorization 
(optional) and finally with a Registration Update Response message. 

The network (MSC) sends a Registration Update Response message to the 
BS when a registration procedure has been successfully completed. This message 
indicates whether the MS’s registration has been accepted or rejected. The mes- 
sage may contain additional parameters to be sent to the MS. Upon receipt of 
this message, the BS sends an appropriate response to the MS. The three possible 
results in registration requests are: successful registration, unsuccessful registra- 
tion, and cancellation of registration. 

A mobile station registering on an access channel may perform any one of 
the following registration types: 


* Distance-based registration: when the distance between the current cell and 
the cell where the mobile last registered exceeds a threshold. 


* Geographic-based registration: whenever a mobile enters a new area of the 
same system. A service area may be segmented into smaller regions, known 
as location areas, which are groups of one or more cells. The MS identifies 
the current location area via parameters transmitted by the MS on the for- 
ward control channel. Location-based registration reduces the paging load 
of the system by allowing the network to page only in the location area(s) 
where a mobile station is registered. 


* Parameter change registration: when specific operating parameters in the 
mobile are changed. 


* Periodic registration: when the system sets parameters on the forward con- 
trol channel to indicate that all or some of the mobile stations must register. 
The registration can be directed to a specific mobile or a class of mobile 
stations. 


* Power-down registration: when the mobile is switched off. This allows the 
network to deregister a mobile immediately upon its power-down. 


* Power-up registration: when power is applied to the mobile, and used to 
notify the network that the mobile is now active and ready to place or 
receive calls. 


* Timer-based registration: when a timer expires in the mobile. This procedure 
allows the database in the network to be cleared if a registered MS does not 
register after a fixed time interval. The time interval can be varied by setting 
parameters on the control channel. 
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MS BS New MSC/VLR HLR Old VLR 


1 Registration 
Determination 


Global Challenge 
2« 


Registration Request 
— 


Validate 
4 RAND 


5 REGISTER 
6 IS-41 REGNOT 
Database 
Т Update 
15-41 REGCANC 

8 > 
9 Confirm 
т REGNOT Response 

REGISTER 


le REGISTER Confirm 


Figure 12.3 Call flows for MS registration of all mobiles listening to a control 
channel. 


It should be noted that all registration types are not supported in a network. 
The following are the call flows for the registration (ANSI-41 standard) of 
all MSs listening to a control channel (see Figure 12.3): 


1. The MS determines that it must register with the system. 


2. The MS listens on the control channel for the global challenge, random 
number (RAND). 


3. The MS sends a message to the BS with IMSI, RAND, and other parameters, 
as needed, in the MS Registration Request. 


4. The BS validates RAND. 
5. The BS sends a REGISTER message to the new MSC/VLR. 


6. If the MS is not currently registered to the serving VLR, the VLR sends a 
REGistration NOTification (REGNOT) message to the user’s HLR con- 
taining the IMSI and other data as needed. 
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7. The MS’s HLR receives the REGNOT message and updates its database 
accordingly (stores the location of the VLR that sent the REGNOT 
message). 

8. The MS’s HLR sends an IS-41 REGistration CANCel (REGCANC) message 
to the old VLR where the MS was previously registered so that the old VLR 
can cancel the MS’s previous registration. 


9. The old VLR returns a Confirmation message that includes the current 
value of the call count (CHCNT). 


10. The user’s HLR then returns a REGNOT Response message to the new 
VLR and passes along information that the VLR needs (e.g., user’s profile, 
interexchange carrier ID, shared secret key for authentication, and current 
value of CHCNT). If the registration is a failure (due to invalid IMSI, service 
not permitted, nonpayment of bill, or other reason), then the REGNOT 
message will include a failure indication. 


11. Upon receiving the successful REGNOT message from the user’s HLR, the 
VLR assigns a TMSI. The MSC receives the message, retrieves the data and 
sends a REGISTER message to the BS. 


12. The BS receives the REGISTER message and forwards it to the MS to 
Confirm Registration. 


Note: For details of various messages refer to the ANSI-41 standard. 


12.4.1 GSM Token-Based Registration 

When an MS registers with the new network, it sends its TMSI and LAI. The 
LAI informs the system where to find the old VLR. The network then queries the 
old VLR for data and uses the data to authenticate the MS. The new VLR then 
communicates with the HLR to update the location of the MS. The HLR sends a 
registration cancellation message to the old VLR. 

The operation of the token-based system is slightly different from the ANSI-41 
system in that the segmentation of call processing between BS, MSC, and VLR 
is defined differently. Therefore the call flow does not, in most cases, distinguish 
where call processing is done. The call flows for token-based registration are 
shown in Figure 12.4. The following are the steps in the call flows: 


1. The MS sends a Registration message to the visiting system with old TMSI 
and old LAI. 


2. The visiting system queries the old VLR for data. 


3. The old VLR returns security-related information (e.g., unused triplets and 
location of HLR). 


4. The visiting system issues a challenge to the MS. 


380 12 Mobility Management in Wireless Networks 


BS, MSC, New VLR 


MS HLR Old VLR 

1 Register 
Quer 
y »2 
Response 
Unique « 3 

Challenge 
4 

Challenge 

Response 

Assign TMSI 
7 Location Update 
8 Data Base 
Update 
Acknowledgment 
9 
Registration Cancellation 10 
| 
New TMSI 
11 
ACK 
12 Á] 


Figure 12.4 Token-based registration. 


л 


. The MS responds to the challenge. 


ON 


. The visiting system assigns a new TMSI. 


7. The visiting system sends a message to the HLR with location update 
information. 


oo 


. The HLR updates its location database with the new location of the MS. 


9. The HLR acknowledges the message and may send additional security- 
related data (additional security triplets). 


10. The HLR sends a Registration Cancellation message to the old system. 
11. The visiting system sends an encrypted message to the MS with new TMSI. 
12. The MS acknowledges the message. 


Note: Steps 7-10 and 11-12 can occur in any order. 
If the old VLR is not reachable for any reason, then the network will request 
the MS to send its IMSI, and communications with the HLR will then occur. 


12.4 Mobile Registration 


MS BSS MSC 
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RIL3-RR channel 
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MAP: Mobile Application Part (See Ch.7) 


RACH: Random Access Channel TMSI: Temporary Mobile Subscriber Identity 
AGCH: Access Grant Channel RIL3: Radio Interface Layer 3 
SDCCH: Stand-alone Dedicated BSSMAP: Base Station Subsystem Management Application part 


Control Channel 


Figure 12.5 IMSI attach process in GSM. 


12.4.2 IMSI Attach and IMSI Detach (Registration and 


Deregistration) in GSM 


In GSM, mobile power-up implies IMSI attach which causes a mobile registration. 
On the other hand, mobile power-down implies IMSI detach causing mobile 
deregistration. Figures 12.5 and 12.6 show call flows for IMSI attach and detach 


(for details see GSM standards). 


12.4.3 Paging in GSM 


In this scenario we assume that the mobile is already registered with the system 
and has acquired a TMSI. It is also assumed that the mobile is located in its home 
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Figure 12.6 IMSI detach process in GSM. 


network. A land subscriber dials the directory number of the mobile subscriber. 
Figure 12.7 shows the call flow for this scenario. 


1. The public switched telephone network (PSTN) routes the call to the MSC 
assigned this directory number. The directory number in the Initial Address 
Message (IAM) is the MS ISDN Number (MSISDN). 

2. The MSC sends the Send Routing Information Message to the HLR to 
provide the routing information for the MSISDN. 

3. The HLR acknowledges the Send Routing Information Message to the 
MSC. This message contain the MS routing number (MSRN). If the MS is 
roaming within the serving area of this MSC, the MSRN returned by the 
HLR will most likely be same as MSISDN. In this scenario we assume that 
the mobile is not roaming. 
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Figure 12.7 Mlobile-terminated call in GSM. 


4. The MSC informs its VLR about the incoming call using a Send Info for 
Incoming Call Message that includes MSRN. 
5. The VLR responds to the MSC through a Page Message that specifies the 


LAI and TMSI of the MS. If the MS is barred from receiving the calls, the 
VLR informs the MSC that a call cannot be directed to the MS. The MSC 
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would connect the incoming call to an appropriate announcement (e.g., 
“The mobile phone that you have called is not permitted to receive calls”). 


. The MSC uses the LAI provided by the VLR to determine which base station 


subsystems (BSSs) will page the MS. The MSC sends the Page Message to 
each of the BSSs to perform the paging of the MS. 


. Each BSS broadcasts the TMSI of the MS in the Page Request Message on 


the paging channel. 


. When the MS hears its TMSI broadcast on the paging channel, it responds to 


the BSS with a Channel Request Message over the common access channel, 
random access channel (RACH). 


. On receiving the Channel Request Message from the MS, the BSS allocates 


an SDCCH (Stand-alone Dedicated Control Channel) and sends the 
Immediate Assignment Message to the MS over the access grant channel 
(AGCH). It is over the SDCCH that the MS communicates with the BSS 
and the MSC until a traffic channel is assigned. 


The MS sends a Page Response Message to the BSS over the SDCCH. The 
message contains the mobile TMSI and LAI. 


The BSS forwards the Page Response Message to the MSC. 

The MSC sends a Process Access Request Message to the VLR. 

The VLR responds with a Complete Call Message. 

The MSC then sends a Setup Message to the MS. 

The MS responds with a Call Confirmed Message. 

The MSC then sends an Alert Message to the MS. 

The MSC sends an Address Complete Message (ACM) to the PSTN. 
When the user answers, the MS sends a Connect Message to the MSC. 
The MSC sends a Connect Acknowledge Message to the MS. 

The MSC sends an Answer Message to the PSTN. The two parties can 
now talk. 

The VLR closes the dialog with the MSC by sending a Send Info for Incoming 
Call (acknowledge) Message to the MSC. 


12.5 Handoff 

As the mobile moves from one cell area to another, an active call must undergo a 
switch from one channel to another. This process is called a handover or handoff. 
In the TDMA system, a handoff usually involves both a change of channel carrier 
frequency and time slot. It also may require a reconfiguration of the wireline 
facilities by dropping the connection to the serving (old) BSS and switching to a 
connection to the new (target) BSS as shown in Figure 12.8. 
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Figure 12.8 Inter-MSC, inter-BSS handoff. 


In this example the mobile tunes from carrier frequency 6 on time slot 3 
served by the old BSS to carrier frequency 9 on time slot 7 served by the new BSS. 
At the same time, the MSC switches the call from the old BSS to the new BSS. All 
this process may take less than 150 ms and go unnoticed by the subscriber. 

Handoff is initiated because of a variety of reasons. Signal strength deterio- 
ration is the most common cause for handoff at the edge of a cell. Other reasons 
may include load balancing where the handoff is network initiated to relieve traffic 
congestion by shifting calls in a highly congested cell to a lightly loaded cell. The 
handoff could be synchronous or it may be asynchronous. Because the mobile 
does not have to resynchronize itself in the synchronous situation, handoff delay is 
much smaller (100 ms in synchronous versus 200 ms in asynchronous). 

Handoffs are either initiated by the base station controller (BSC), based upon 
radio subsystem criteria such as RF level (RXLEV), signal quality (RXQUAL) or 
distance, or they are a result of network traffic loading. Appropriate decisions are 
made by a handoff algorithm. The measurements performed by the MS and base 
station transceiver (BTS) which are collated by the BSC include: (1) by MS—RX- 
LEV, RXQUAL (for serving downlink and adjacent BSs), and (2) by BTS—RXLEV, 
RXQUAL, Distance (uplink for serving BS). 
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Within the BSC these measurements are compared with a set of threshold 
values. If any one of the thresholds is exceeded, the BSC attempts to rectify the 
situation by means of power control. If the adjustment of power control cannot 
bring the parameters within the thresholds, a handoff is required. 

There are two types of handoff: internal and external. If the serving and 
target base stations are located within the same BSS, the BSC for the BSS performs 
the handoff without the involvement of MSC. This type of handoff is referred 
to as intra-BSS handoff. However, if the serving and target base stations do not 
reside within the same BSS, an external handoff is performed. In this case, the 
MSC coordinates the handoff and performs the switching tasks between the serv- 
ing and target base stations. The external handoffs can be either within the same 
MSC (intra-MSC) or between different MSCs (inter-MSC). 


12.5.1 Handoff Techniques 

Handoff techniques can be classified as mobile-controlled handoff (MCHO), network- 
controlled handoff (NCHO), and mobile-assisted handoff (MAHO). MCHO is the 
most popular technique for low-tier radio systems (indoor). It has been used by 
European digital enhancements of cordless telephony (DECT) and North American 
personal access communications system (PACS). In this case, the mobile continuously 
monitors the signal strength and signal quality from the serving base station and several 
handoff candidate base stations. When the handoff criteria are met, the mobile checks 
the best candidate base station for an available traffic channel and launches a handoff 
request. The combined control of automatic link transfer (ALT) and time slot transfer 
(TST) by the mobile is considered desirable because of the following reasons. 


• Offload the handoff task from the network. 


* Ensure robustness of the radio link by allowing reconnecting of calls even 
when radio channels suddenly become poor. 


* Prevent simultaneous triggering of the two processes by control of both 
ALT and TST. 


Network-controlled handoff is employed by a low-tier CT-2+ and a high-tier 
AMPS system. In this case, the base station monitors signal strength and signal quality 
from the mobile. When these fall below some thresholds, the network arranges for a 
handoff to another base station. The network asks all surrounding base stations to 
monitor the signal from the mobile and report the measurements back to the network. 
The network selects a new base station for handoff and informs both the mobile and 
the new base station. 

Mobile-assisted handoff strategy has been employed by high-tier 2G (GSM, 
IS-95 CDMA, IS-136 TDMA) and 3G (WCDMA, cdma2000) systems. In this 
approach, the network provides the mobile with a list of base station frequencies (those 
of nearby base stations). The network asks the mobile to measure the signal strengths 
and signal quality (usually determined from bit error rate) from the surrounding base 
stations (as well as the serving base station) and report the measurements back to the 
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serving base station so that the network can decide whether a handoff is required and 
to which base station. Since MAHO has been widely used for the high-tier cellular 
systems, we focus only on this technique in subsequent sections. 


12.5.2 Handoff Types 

Handoff can be categorized as hard handoff, soft handoff, and softer handoff. The 
hard handoff can be further divided into intrafrequency and interfrequency hard 
handoffs. During the handoff process, if the old connection is terminated before 
making the new connection, it is called a hard handoff. In the case of an interfre- 
quency hard handoff, the carrier frequency of the new radio access is different from 
the old carrier frequency to which the MS was connected. On the other hand, if the 
new carrier frequency, to which the MS is accessed after the handoff procedure, is 
the same as the original carrier then it is referred to as an intrafrequency handoff. In 
the 2G TDMA systems, the majority of handoffs are intrafrequency hard handoffs. 

Interfrequency handoffs may occur between two different radio access networks, 
for example, between GSM and Universal Mobile Telecommunications Services. In 
this case, it can also be called intersystem handoff. An intersystem handoff is always 
a type of interfrequency, since different frequencies are used in different systems. 

The handoff is referred to as soft bandoff if the new connection is established 
before the old connection is released. In the 3G systems, the majority of handoffs 
are intrafrequency soft handoffs. A soft handoff performed between two sectors 
belonging to different base stations but not necessarily to the same BSC is called 
a 2-way soft handoff. A soft handoff may be more than 2-way if the number of 
sectors involved in the handoff process is more than two. 

In softer bandoff, the BS transmits through one sector but receives from more 
than one sector. In this case the MS has active uplink radio connections with the 
network through more than one sector belonging to the same BS. When soft and 
softer handoffs occur simultaneously, the term soft-softer bandoff is usually used. 


12.5.3 Handoff Process and Algorithms 

A basic handoff process consists of three main phases including measurements, 
decision, and execution phase (see Figure 12.9). The overall handoff process 
discussed here is related to MAHO strategy. The MS continuously measures the 
signal strength of the serving and the neighboring cells, and reports the results to 
the network. From a system performance standpoint, handoff measurement phase 
is an important task. The signal strength of the radio channel may vary signifi- 
cantly due to fading and signal path loss, resulting from the cell environment and 
user mobility. Also, an excess of measurement reports by MS or handoff execution 
by the network increases the overall signaling load, which is not desired. 

The decision phase consists of an assessment of the overall quality of service 
(QoS), of the connection and comparing it with the requested QoS attributes and 
estimates from neighboring cells. Depending on the outcome of this comparison, 
the handoff procedure may or may not be triggered. 
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Figure 12.9 Handoff process. 


The execution phase involves handoff signaling and radio resource allocation. 

Radio signal strength (RSS) measurements from the serving cell and neigh- 
boring cells are primarily used in most of the networks. Alternatively or in con- 
junction, the path loss, signal-to-interference ratio (SIR), bit error rate (BER), and 
block error rate (BLER) have been used in certain voice and data networks. The 
following parameters are generally used in the handoff algorithm: 


* Upper threshold is the level at which the signal strength of the connection is 
at the maximum acceptable level with respect to the required QoS. 

* Lower threshold is the level at which the signal strength of the connection 
is at the minimum acceptable level to satisfy the required QoS. Thus, the 
signal strength of the connection must not fall below this level. 

* Handoff margin is a predefined parameter that is set at the point where the 
signal strength of the neighboring cell has exceeded the signal strength of 
the serving cell by a certain amount and/or a certain time. 


Some of the traditional handoff algorithms are as follows: 


* RSS type: The BS with the largest signal strength is selected. 

* RSS plus threshold type: A handoff is performed if the RSS of a new BS 
exceeds that of the serving BS and the signal strength of the serving BS is 
below the lower threshold value. 

* RSS plus handoff margin type: A handoff is performed if the RSS of a new 
BS is more than that of the serving BS by a handoff margin. 
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12.5.4 Handoff Call Flows 
In the following sections we discuss intra-MSC and inter-MSC handoff scenarios 
for GSM. 


Intra-MSC Handoff 

The MS constantly monitors the signal quality of the BSS-MS link. The BSS may also 
optionally forward its own measurements to the MS. When the link quality is poor, 
the MS will attempt to maintain the desired signal quality of the radio link by request- 
ing a handoff. The following steps occur in the handoff process (see Figure 12.10). 


1. The MS determines that a handoff is required; it sends the Measurement Report 
Message to the serving BSS. The message contains the RSS measurements. 


2. The serving BSS sends a Handoff Request Message to the MSC. The mes- 
sage contains a rank-ordered list of the target BSSs that are qualified to 
receive the call. 
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Figure 12.10 Call flow for intra-MSC handoff. 
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. The MSC reviews the global cell identity (GCI) associated with the best candidate 


to determine if one of the BSSs that it controls is responsible for the cell area. In 
this scenario the MSC determines that the cell area associated with the target 
BSS is under its control. To perform an intra-MSC handoff, two resources are 
required: a trunk between the MSC and the target BSS and a radio channel in the 
new cell. The MSC reserves a trunk and sends a Handoff Request Message to the 
target BSS. The message includes the desired cell area for handoff, the identity of 
the MSC-BSS trunk that was reserved, and the mobile encryption key (Kj). 


. The target BSS selects and reserves the appropriate resources to support 


the handoff pending the connection execution. The target BSS sends a 
Handoff Request Acknowledgment to the MSC. The message contains the 
new radio channel identification. 


. The MSC sends the Handoff Command Message to the serving BSS. In this 


message the new radio channel identification supplied by the target BSS is 
included. 


. The serving BSS forwards the Handoff Command Message to the MS. 
. The MS retunes to the new radio channel and sends the Handoff Access 


Message to the target BSS on the new radio channel. 


. The target BSS sends the Physical Information Message to the MS. 
. The target BSS informs the MSC when it begins detecting the MS handing 


over with the Handoff Detected Message. 

The target BSS and the MS exchange messages to synchronize/align the 
MS’s transmission in the proper time slot. On completion, the MS sends 
the Handoff Completed Message to the target BSS. 

At this point the MSC switches the voice path to the target BSS. Once the 
MS and target BSS synchronize their transmission and establish a new 
signaling connection, the target BSS sends the MSC the Handoff Completed 
Message to indicate that the handoff is successfully completed. 

The MSC sends a Release Message to the serving BSS to release the old 
radio channel. 

At this point the serving BSS releases all resources with the MS and sends 
the Release Complete Message to the MSC. 


In hard handoff, the open interval gap starts when the MS retunes to the new 


radio channel and ends after synchronization without any loss in voice/data transmis- 
sion in the BSS or MSC. It should be noted that GSM recommendations require that 
the open interval gap during a handoff should not exceed 150 ms for 90% handoffs. 


Inter-MSC Handoff 

In this scenario we assume that a call has already been established. The serving 
BSS is connected to the serving MSC and the target BSS to the target MSC (see 
Figure 12.11). 
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Figure 12.11 Call flow for inter-MSC handoff. 
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Figure 12.11 (Continued). 


. Same as step 1 in the intra-MSC handoff: handoff required 
. Same as step 2 in the intra-MSC handoff: rank-ordered list of target BSSs 
. When the call is handed over from the serving MSC to the target MSC via 


PSTN, the serving MSC sets up an inter-MSC voice connection by placing 
the call to the directory number that belongs to the target MSC. When the 
serving MSC places this call, the PSTN is unaware that the call is a handoff 
and follows the normal call routing procedures, delivering the call to the 
target MSC. The serving MSC sends a Prepare Handoff Message to the 
target MSC. 


. The target MSC sends a handoff directory number (HAND_NUM) message 


to its VLR to assign TMSI. 


. The target VLR sends the TMSI in the directory number completion 


(HAND_NUM_COMP) message. 


6. Same as step 3 in the intra-MSC handoff: handoff request to target BSS 


7. Same as step 4 in the intra-MSC handoff: target BSS acknowledges with 


new radio channel 
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8. The target MSC sends the handoff perform request acknowledgment 
(HAND_PER_ACK) message to the serving MSC indicating that it is ready 
for the handoff. 


9. The serving MSC sends the network setup (NET_SETUP) message to the 

target MSC to set up the call. 

10. The target MSC acknowledges this message with the network setup 
completion (SETUP. COMD) message to the serving MSC. 

11. Same as step 5 in the intra-MSC handoff: serving BSS handoff 

12. Same as step 6 in the intra-MSC handoff: mobile station handoff 

13. Same as step 7 in the intra-MSC handoff: mobile retunes and handoff 
accepted 

14. Same as step 8 in the intra-MSC handoff: channel information to mobile 

15. Same as step 9 in the intra-MSC handoff: target BSS detects handoff 

16. Same as step 10 in the intra-MSC handoff: synchronization of new radio 
channel 

17. Same as step 11 in the intra-MSC handoff: voice path to target BSS 
established 


18. The target MSC sends the send end signal (SEND. ENDSIG) message to the 
serving MSC as a reminder to inform the target MSC of the call release. 


19. At this point the handoff has been completed, a new voice path is set 
up between the MS and target BSS. The target MSC sends an ANSWER 
message to the serving MSC. 

20. Same as step 12 in the intra-MSC handoff: old radio channel release 
request 

21. Same as step 13 in the intra-MSC handoff: old radio channel release 
complete 

22. The serving MSC sends the message to the target MSC: call released 

23. The serving MSC releases the network resources and sends the NET REL 
message to the target MSC. 

24. The target MSC sends the release handoff directory number (REL HAND _ 
NUM | message to the VLR to release the connection. 


12.6 Summary 

In this chapter we focused on mobility management in wireless wide area networks 
(WWANSs). Mobility is concerned with radio mobility and network mobility. 
Radio mobility involves a handoff process, whereas network mobility deals with 
mobile paging and location update. We presented an application of the simple 
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mobility model based on a fluid flow concept for a wireless network in an urban 
area with small cells and high user density. Next, we discussed mobile registration 
procedures and message flows of ANSI-41 standards for North American cellu- 
lar systems and highlighted differences with the token-based registration scheme 
used in GSM. We concluded the chapter by explaining different types of handoff 
(hard, soft, and softer), handoff procedure, and message flows for the intra- and 
inter-MSC handoff. 


Problems 


12.1 


12.2 


12.3 
12.4 


12.5 


Describe mobility models that are used in cellular systems to determine 
location updates and number of handoffs. 


Repeat Example 12.1 using the following data and other data in the 
example: 

e Density of mobile in the cell = 6000 mobiles/km? 

* Cell radius = 1km 

e Average moving velocity of a mobile = 20km/hour 

* Number of cells per LA = 8 

* Number of LAs per MSC/VLR = 4 


What is mobile registration? Why is it used? 


Describe different types of registration schemes that can be used in a cellular 
system. 


Describe the main features of the GSM token-based registration 
scheme. 


12.6 What is handoff in a cellular system? Why is handoff used? 
12.7 Describe various handoff techniques used in mobile networks. 
12.8 What are the differences between hard and soft handoff methods? 
12.9 Describe the steps used in the handoff process of a cellular system. 
12.10 Develop a flow diagram for an intra-MSC handoff in the CDMA IS-95 
network. 
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CHAPTER 13 


Security in Wireless Systems 


13.1 Introduction 

Although radio has existed for almost 100 years, most of the population uses 
wireline phones. Only over the last 30 years have large numbers of people used 
wireless or cordless phones. With this exposure, users of wireless phones and the 
news media have challenged two bedrocks of the telecommunications industry: 
privacy of conversation and billing accuracy. 

The current concepts of privacy of communications and accuracy of billing 
are based on the telephone company’s ability to route an individual pair of wires 
to each residence and office. Thus, when a call is placed on a pair of wires, the 
telephone company can correctly associate the call on a wire with the correct 
billing account [1-4]. Similarly, since there is a pair of wires from a home to 
the telephone company central office, no one can easily listen to the call. For 
most people, a wiretap is an abstract concept that only concerns someone who is 
involved in illegal activities. 

Communications on shared media can be intercepted by any user of the 
media. When the media are shared, anyone with access to the media can listen 
to or transmit on the media. Thus, communications are no longer private. In 
shared media, the presence of a communication request does not uniquely iden- 
tify the originator, as it does in a single pair of wires per subscriber. In addition, 
all users of the network can overhear any information that an originator sends 
to the network and can resend the information to place a fraudulent call. The 
participants of the phone call may not know that their privacy is compromised 
(see Figure 13.1). When the media are shared, privacy and authentication are lost 
unless some method is established to regain it. Cryptography provides the means 
to regain control over privacy and authentication [5]. 

In the past, there have been attempts to control privacy and authentication 
through noncryptographic means. These have failed thus far. The designers of the 
original cellular service in the United States implemented authentication of the 
mobile telephone using a number assignment module (NAM) and an electronic 
serial number (ESN). The NAM would be implemented in a programmable read 
only memory (PROM) for easy replacement when the phone number changed. 
The ESN would be implemented in a tamper-resistant module that could not be 
changed without damaging the cellular telephone. In practice, many manufacturers 
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Figure 13.1 Mobile system privacy. 


implement the NAM and the ESN in either battery-backed random access memory 
(RAM) or electrically erasable PROM (EEPROM). The manufacturer and the 
installer place the data in the phone via external programming. 

Similarly, the designers assumed that privacy of cellular communications 
would occur because 900-MHz scanners would be difficult and too expensive to 
build. When those scanners became easily available, the U.S. Congress passed the 
Electronic Communications Privacy Act in 1986, and in 1992 the FCC banned 
the importation and manufacture of scanners covering cellular phone bands. 
In practice, the laws do not help since there are millions of scanners in existence 
today. Furthermore, cellular test equipment is easy to build or buy, and most 
cellular phones can be placed in a maintenance mode that allows them to monitor 
any channel. Any cellular phone can be easily converted to a cellular scanner. 

To provide the proper privacy and authentication for a mobile station, a 
cryptographic system is essential. Some of the cryptographic requirements are in 
the air interface between the mobile station and base station. Other requirements 
are on databases stored in the network and on information shared between sys- 
tems in the process of handoff to provide service for roaming units. 

In this chapter we examine the requirements needed for privacy and authenti- 
cation of wireless systems, and then we discuss how each of the cellular and personal 
communications services (PCS) systems supports these requirements. The chapter 
discusses four levels of voice privacy. We then identify requirements in the areas 
of privacy, theft resistance, radio system requirements, system lifetime, physical 
requirements as implemented in mobile stations, and law enforcement needs. We 
will examine different methods that are in use to meet these needs. 
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13.2.1 Purpose of Security 
Most frauds result in a loss to the service provider. It is important to recognize 
that this loss may be in terms of: 


e No direct financial loss, but results in lost customers and an increase in use 
of the system with no revenue. 


* Direct financial loss, where money is paid out to others, such as other net- 
work carriers and operators of value-added networks such as a premium 
rate service line. 


* Potential loss of business, where customers may move to another service 
provider because of the lack of security. 


* Failure to meet legal and regulatory requirements, such as license condi- 
tions, or data protection legislation. 


The objective of security for most wireless systems is to make the system as 
secure as the public switched telephone network. The use of radio as the trans- 
mission medium allows a number of potential threats from eavesdropping on the 
transmissions. It was soon apparent in the threat analysis that the weakest part of 
the system was the radio path, as this can be easily intercepted. 

The technical features for security are only a small part of the security require- 
ments; the greatest threat is from simpler attacks such as disclosure of the encryption 
keys, an insecure billing system, or corruption. A balance is required to ensure that 
these security processes meet these requirements. At some point in time judgment 
must be made of the cost and effectiveness of the security measure limitation. 


13.2.2 Privacy Definitions 
When most people think of privacy, they think of either of two levels [6,13]: none, 
and privacy that is used by military users. 

However, as we describe here, there are four levels of privacy that need to 
be considered. 


* Level 0: None. With no privacy enabled, anyone with a digital scanner could 
monitor a call. 


* Level 1: Equivalent to wireline. As discussed earlier, most people think 
wireline communications are secure. Anyone in the industry knows that 
they are not, but the actions to tap a line often show the existence of the 
tap. With wireless communications, the tap can occur without anyone's 
knowledge. Therefore, the actions to tap a wireline call must be translated 
into a different requirement for a wireless system. With this level of security, 
the types of conversations that would be protected are the routine every- 
day conversations of most people. These types of communications would 
be personal discussions that most people would not want exposed to the 
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general public— for example, details of a recent operation or other medical 
procedure, family financial matters, mail order using a credit card, family 
discussions, request for emergency services (911), discussions of vacation 
plans (thus revealing when a home will be vacant). 


Level 2: Commercially secure. This level would be useful for conversations 
in which the participants discuss proprietary information—for example, 
stock transactions, lawyer-client discussions, mergers and acquisitions, or 
contract negotiations. A cryptography system that allows industrial activi- 
ties to be secure for about 10-25 years would be adequate. If one particular 
conversation was broken, the same effort would be needed to break other 
conversations. 


Level 3: Military and government secure. This is the level that an average 
person thinks of when cryptography is discussed. This would be used for 
the military activities of a country and nonmilitary government communi- 
cations. The appropriate government agency would define requirements for 
this level. 


13.2.3 Privacy Requirements 

In this section we discuss the privacy needs of a wireless telephone user. Figure 13.2 
is a high-level diagram of a wireless system that shows areas where intruders can 
compromise privacy. A user of a mobile system needs privacy in the following areas: 


* Privacy of call setup information. During a call setup, the mobile station 


will communicate information to the network. Some of the information 
that a user or mobile station could send includes calling number, calling 
card number, or type of service requested. The system must send all this 
information in a secure fashion. 


Privacy of speech. The system must encrypt all spoken communications so 
that intruders cannot intercept the signals by listening on the airwaves. 


Privacy of data. The system must encrypt all user communications so that 
intruders cannot intercept the data by listening on the airwaves. 


Privacy of user location. A user should not transmit information that enables 
an eavesdropper to determine the user's location. The usual method to meet 
this requirement is to encrypt the user ID. Three levels of protection are often 
needed: 


1. Eavesdropping of radio link 


2. Unauthorized access by outsiders to the user location information 
stored in the network visitor location register (VLR) and home loca- 
tion register (HLR) 


3. Unauthorized access by insiders to the user location information stored 
in the network. This level is difficult to achieve, but not impossible 
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Figure 13.2 Privacy requirements. 


* Privacy of user identification. When a user interacts with the network, the 
user ID is sent in a way that does not show user identification. This prevents 
analysis of user calling patterns based on user ID. 


Privacy of calling patterns. No information must be sent from a mobile that 
enables a listener of the radio interface to do traffic analysis on the mobile 
user. Typical traffic analysis information is: 


* Calling number 
* Frequency of use of the mobiles 
* Caller identity 


* Privacy of financial transactions 


If the user transmits credit card information over any channel, the system must 
protect the data. Users may order items from mail order houses via a telephone that 
is wireless. Users may choose to voice their credit card numbers rather than dialing 
them via touch-tone phone. 

Users may access bank voice response systems, where they send account 
data via tone signaling. Users may access calling card services of carriers and may 
speak or use tone signaling to send the card number. 
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All these communications need to be private. Since the user can send the 
information on any channel— voice, data, or call control—the system must 
encrypt all channels. 


13.2.4 Theft Resistance Requirements 

The system operator may or may not care if a call is placed from a stolen mobile 
station as long as the call is billed to the correct party. The owner of a mobile 
station will care if the unit is stolen. 

The mobile terminal design should reduce theft of the mobile station by 
making reuse of a stolen mobile station difficult. Even if the mobile station is 
registered to a new legitimate account, the use of the stolen mobile station should 
be stopped. The mobile station design should also reduce theft of services by mak- 
ing reuse of a stolen mobile station unique information difficult. Requirements 
needed to accomplish the reduction in theft are: 


* Clone-resistant design. In the current wireless systems, cloning of mobile 
stations is a serious problem; methods must be put in place to reduce or elim- 
inate fraud from cloning. To achieve fraud reduction, mobile station unique 
information must not be compromised by any of the following means: 


1. Over the air: someone listening to a radio channel should not be able 
to determine information about the mobile station and then program 
it into a different mobile station; 


2. From the network: The databases in the network must be secure. No 
unauthorized person should be able to obtain information from those 
databases. 


3. From network interconnect: Systems will need to communicate with 
each other to verify the identity of roaming mobile stations. A system 
operator could perpetrate fraud by using the security information about 
roaming mobile stations to make clone mobile stations. 


4. The communication scheme used between systems to validate roaming 
mobile stations should be designed so that theft of information by a fraud- 
ulent system does not compromise the security of the mobile station. 


5. Thus, any information passed between systems for security checking 
of roaming mobile stations must have enough information to authenti- 
cate the roaming mobile station. It must also have insufficient informa- 
tion to clone the roaming mobile station. 


6. From users cloning their own mobile station: Users can perpetrate 
fraud on the system. Multiple users could use one account by clon- 
ing mobile stations. The requirements for reducing or eliminating this 
fraud are the same as those to reduce repair and installation fraud 
described below. 
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* Installation and repair fraud. Theft of service can occur when the service 
is installed or when a terminal is repaired. Multiple mobile stations can be 
programmed with the same information (cloning). The cryptographic sys- 
tem must be designed so that installation and repair cloning is reduced or 
eliminated. 


* Unique user ID. More than one person may use a handset. It is necessary 
to identify the correct person for billing and other accounting informa- 
tion. Therefore, the user of the system must be uniquely identified in the 
system. 


* Unique mobile station ID. When all security information is contained in a 
separate module (smart card), the identity of the user is separate from the 
identity of the mobile station. Stolen mobile stations can then be valuable 
for obtaining service without purchasing a new (full price) mobile station. 
Therefore, the mobile station should have unique information contained 
within it that reduces or eliminates the potential for stolen mobile stations 
to be registered with a new user. 


13.2.5 Radio System Requirements 
When a cryptographic system is designed, it must function in a hostile radio 
environment characterized by bit errors caused by: 


* Multipath fading and thermal noise. The characteristics of the radio 
channel affect the choice of cryptographic algorithms. The radio signals 
will take multiple diverse routes from the mobile station to the base station. 
The effect of multiple diverse routes that can be severe and cause burst 
errors is fading. Although the system may be interference limited, there may 
be conditions when the limiting factor on performance is thermal noise. 
The choice of cryptographic modes must include both of these channel 
characteristics. 


* Interference. The mobile systems may initially share a radio spectrum with 
other users. The modulation scheme and cryptographic system must be 
designed so that interference with shared users of the spectrum does not 
compromise the security of the system. 


* Jamming. Although usually thought about only in the context of military 
communications, civilian systems can also be jammed. As wireless commu- 
nication becomes ubiquitous, jamming of the service can also be a method 
of breaking the security of the system. Therefore, cryptographic systems 
must work in the face of jamming. 


* Support of handoff. When the call handoff occurs to another radio port in 
the same or adjacent mobile system, the cryptographic system must maintain 
synchronization. 


404 13 Security in Wireless Systems 


13.2.6 System Lifetime Requirements 

Ithas been estimated that computing power doubles every 18 months. An algorithm 
that is secure today may be breakable in 5 to 10 years. Since any system being 
designed today must work for many years after design, a reasonable requirement 
is that the procedures must last at least 20 years. The algorithm must have provi- 
sions to be upgraded in the field. 


13.2.7 Physical Requirements 

Any cryptographic system used in a mobile station must work in the practical 
environment of a mass-produced consumer product. Therefore, the cryptographic 
system must meet the following requirements: 


* Mass production. It can be produced in mass quantities (million of units 
per year). 

* Exported and/or imported. The security algorithm must be capable of being 
exported and imported. Two problems are solved with export and import 
restrictions lifted: 

1. It can be manufactured anywhere in the world. 
2. It can be carried on trips outside the United States. 
As an alternative, if an import/export license for the algorithm cannot 
be obtained, the following restrictions must apply: 
* Fither only U.S. manufacturing or two-stage manufacturing 


* All mobile stations must be made in the United States or all mobile 
stations made outside the United States will have final assembly in the 
United States 


* All mobile stations must be impounded on leaving the United States. 

* Basic handset requirements. Any cryptographic system must have mini- 
mum impact on the following mobile station requirements: 

e Size 

* Weight 

* Power drain 

* Heat dissipation 

* Microprocessor speed 

* Reliability 

* Cost 


e Low-cost level 1 implementation. Level 1 implementation would be expected 
as a baseline for most mobile systems. Therefore, level 1 implementation must 
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be low cost. Designers obtain low-cost solutions by implementations that 
can be done either in software or in low-cost hardware. Software solutions 
are attractive. Often mobile stations have spare read only memory (ROM), 
RAM, and central processing unit (CPU) cycles in microprocessors. 


13.2.8 Law Enforcement Requirements 

When a valid court order is obtained in the United States, current telephones 
(either wired or wireless) are relatively easy to tap by the law enforcement com- 
munity. The same requirements described in this chapter to ensure privacy and 
authentication of wireless mobile communications make it more difficult to exe- 
cute legitimate court wiretap orders. 

The law enforcement community can wiretap mobile stations after properly 
obtaining court orders. When an order is obtained, there are several ways a mobile 
system operator can meet the needs of the order. Any method used must not compro- 
mise the security of the system. Figure 13.3 shows possible approaches to tapping the 
call. The tap can be done over the air or at a central switch. 

This discussion assumes that only the radio portion of the link is encrypted 
and the call appears in the clear in the wired portion of the network. If end-to-end 
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Figure 13.3 Law enforcement requirements. 
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encryption is used, other means must be considered to obtain the information since 
the call never appears clear except at the end points. 


Over-the-Air Tap 

When the tap is done over the air, a wiretap van is required. The van is driven 
to inside the cell where the call is placed. A centrally located base station (BS) 
receives interference from mobile stations in many cells or may not be able to 
receive a low-power mobile station at all. 

In a large-cell mobile system, wiretap stations could be deployed in each 
cell, but in a small cell system, the number of tap points would be too high. 
Therefore, a wiretap van is needed and is driven to the correct cell where the call 
is placed. 

After the van is driven to the correct cell, it needs to be close to the mobile 
station. À van might have an antenna that is a maximum of 6 to 10 feet high 
versus a BS antenna has a height of 25 to 100 feet or more. Thus, the van must 
be closer to the mobile station than a cell radius. A quick rule of thumb for the 
wiretap van is that if the mobile station is in line of sight, then the wiretap van can 
receive the mobile station transmission. 

If a wiretap van is used, then the transmissions of the mobile station must be 
decrypted. The following are possibilities: 


* No encryption: This approach makes tapping the easiest; if no encryption 
is used, anyone can listen to a call over the airwaves. Thus, law enforcement 
personnel can listen to and record a call, and so can anyone else. 


* Breakable algorithms: If the algorithm is weak enough, law enforcement 
agencies can break the algorithm when permitted to do so by an appro- 
priate court order. Unfortunately, given the proliferation of desktop/laptop 
personal computers, any algorithm that can be easily broken by the law 
enforcement community will also be quickly broken by anyone else. 


* Strong encryption: Strong encryption makes it difficult, if not impossible, 
for the wiretap van to decrypt the transmission. One method to resolve this 
dilemma is to use a key escrow system where all cryptographic keys would 
be available from an appropriate key escrow agency. With a court order, 
the information could be obtained by law enforcement agencies so that they 
could listen to and record a call. 


Wiretap at Switch 

Since all mobile calls must be routed through a central switch, those calls that use 

radio-link-only encryption can be tapped at the central switch under a court order. 
This is the preferred method for low-power wireless calls. This method 

leaves it to the user and system provider to have appropriate levels of security in 

the wireless portion of the call. 


13.4 
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13.3 Required Features for a Secured Wireless 


Communications System 


For wireless communications to be secure the following features must be avail- 


able [8-12]: 


User authentication proves that the users are who they claim to be. 


Data authentication consists of data integrity and data origin authentication. 
With data integrity the recipient can be sure that the data has not changed. 
Data origin authentication proves to the recipient that the stated sender has 
originated the data. 


Data confidentiality means the data is encrypted so that it is not disclosed 
while in transit. 


Non-repudiation corresponds to a security service against denial by either 
party of creating or acknowledging a message. 


Authorization is the ability to determine whether an authenticated entity 
has the permission to execute an action. 


Audit is a history of events that can be used to determine whether anything 
has gone wrong and, if so, what it was, when it went wrong, and what 
caused it. 


Access control enables only authorized entities to access resources. 


Availability ensures that resources or communications are not prevented 
from access or transmission by malicious entities. 


Defense against denial of service is the attack corresponding to the security 
service of availability. 


13.4 Methods of Providing Privacy and Security in 


Wireless Systems 


North American and European cellular and PCS systems support a variety of air 
interface protocols. They include: 


The Advanced Mobile Phone System (AMPS) 

The IS-54/IS-136 TDMA protocol 

The IS-95 CDMA 

The cdma2000 

The Global System for Mobile communications (GSM) 
The Wideband CDMA (WCDMA) system 


Across these protocols, there are four security models that have been used 


for cellular/ PCS phones in the United States and Europe. 
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1. MIN/ESN: The original AMPS used a 10-digit mobile identification 
number (MIN) and a 32-bit ESN. All data is sent in clear text. Data is shared 
between systems with bad (incorrect) MINs, ESNs, and MIN/ESN pairs. When a 
mobile station (MS) roams into a system, first the bad list is checked, and then a 
message is sent to the home system to validate the MIN/ESN pair. The intersystem 
communications are sent via Signal System 7 (SS7) using an ANSI IS-41 protocol. 

As an improvement to this approach, some systems require that a user enter 
a PIN before placing the calls. The main advantage of the Personal identification 
number (PIN) is that it can be changed in the network when it is compromised, 
and the user can continue to have the same phone number. Cellular phones that are 
cloned must have their phone number (MIN) changed to stop the fraudulent use. 


2. Shared secret data (SSD): The TDMA and CDMA systems in the United 
States use SSD stored in the network and the mobile phone. At service initiation 
time, a secret key is stored in the phone and the network. AMPS, IS-95 CDMA, 
IS-54/IS-136 TDMA, and cdma2000 all support SSD. The intersystem communi- 
cations are sent via SS7 using an ANSI IS-41 protocol. 

All mobile stations are assigned an ESN at the time of manufacturing. They 
are also assigned a 15-digit international mobile subscriber identity (IMSI), that 
is unique worldwide, an A-key, and other data at the time of service installation. 
When the MS is turned on, it must register with the system. When it registers, it 
sends its IMSI and other data to the network. The VLR in the visiting system then 
queries the HLR for the security data and service profile information. The VLR 
then assigns a temporary mobile subscriber identity (TMSI) to the MS. The MS 
uses the TMSI for all further access to that system. The TMSI provides anonymity 
of communications since only the MS and the network know the identity of the 
MS with a given TMSI. When the MS roams into a new system, some air inter- 
faces use the TMSI to query the old VLR and then assigns a new TMSI; other air 
interfaces request that the MS send its IMSI and then assign a new TMSI. 

Each time an MS places or receives a call, a call counter (CHCNT) is 
incremented. The counter is also used for clone detection since clones will not 
have a call history identical to the legitimate phone. 


3. Security triplets (token based): GSM uses its own unique algorithm and 
does not share secrets between cellular or PCS systems. It uses a token-based 
authentication scheme. When an MS roams into a system, a message is sent to 
the home system asking for sets (3 to 5 typically) of triplets (unique challenge, 
response to the challenge, and a voice privacy key derived from the challenge). 
Each call that is placed or received uses one triplet. After all triplets are used up, 
the visited system must send a new message to the home system to get another set 
of triplets. The intersystem communications use the CCITT 557 and GSM mobile 
application part (MAP) protocol. 

Each system operator can choose its own authentication method. The MS and 
the HLR each support the same method and have common data. Each MS sends a 
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registration request; then the network sends a unique challenge. The MS calculates 
the response to its challenge and sends a message back to the network. The VLR 
contains a list of triplets; the network compares a triplet with responses it receives 
from the MS. If the response matches, the MS is registered with the network. The 
just-used triplet is discarded. 


4. Public key: The public key system is analogous to the lock and its 
combinations. Public key algorithm relies on two cryptographic keys, intimately 
related to each other but each not derivable from the other. Public key systems do 
not need communications to the home system to validate the MS. The intersys- 
tem communications are still needed to validate the account and get user profile 
information. 


13.5 Wireless Security and Standards 

The National Institute of Standards and Technology (NIST) expects that future 
IEEE 802.11 (and possibly other wireless technologies) products will offer advanced 
encryption standard (AES)-based data link level cryptographic services that are 
validated under the U.S. Federal Information Processing Standard (FIPS) 140-2 [7]. 
As these will mitigate most concerns about wireless eavesdropping or active wire- 
less attacks, their use is strongly recommended when they become available. 


* IEEE 802.11 — WLAN. Data security using encryption is an optional 
functionality of medium access control (MAC). The functionality is called 
wired equivalent privacy (WEP). Encryption is only supplied between 
stations and not on an end-to-end basis. No key management is speci- 
fied. Authentication is performed by assigning an Extended Service Set ID 
(ESSID) to each access point (AP) in the network and by using the ESSID 
in a challenge-response authentication scheme. WEP was shown to have 
severe security weaknesses. Wi-Fi protected access (WPA) was introduced 
by the Wi-Fi Alliance as an intermediate solution to WEP insecurities. WPA 
implemented a subset of IEEE 802.111 specifications which will be discussed 
in the following section. 


European and North American Systems. Almost all information being sent 
between an MS and the network is encrypted, and sensitive information is 
not transmitted over a radio channel. 


13.6 IEEE 802.11 Security 


The IEEE 802.11 Wi-Fi wireless local area network (WLAN) (see Chapter 18) 
standard addressed security with the WEP protocol, which proved relatively easy 
to crack and was shown to have major security weaknesses. IEEE 802.111, also 
known as Wi-Fi protected access 2 (WPA2), is an improved security protocol for 
TEEE 802.11. IEEE 802.111 includes stronger encryption, authentication, and key 
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management strategies that go a long way toward guaranteeing data and system 
security. 

The new data-confidentiality protocols in 802.11i are the temporal key 
integrity protocol (TKIP) and counter-mode/block chaining message authentica- 
tion code protocol (CCMP). 802.111 also uses an 802.1X key distribution system 
to control access to the network. Because 802.11 handles unicast and broadcast 
traffic differently, each traffic type has different security concerns. 802.11i uses a 
negotiation process to select the correct confidentiality protocol and key system 
for each traffic type. Other features introduced in 802.11i include key caching and 
preauthentication. 

The TKIP is a data confidentiality protocol, which improves the security 
of products using WEP. Among WEP's numerous flaws are its lack of a message 
integrity code and its insecure data-confidentiality protocol. The message integrity 
code enables devices to authenticate that the packets are coming from the claimed 
source. This authentication is important in a wireless system where traffic can be 
easily injected. The TKIP uses a mixing function to defeat weak-key attacks. The 
mixing function creates a per frame key to avoid the WEP weaknesses. 

The CCMP is a data-confidentiality protocol to handle packet authentication 
as well as encryption. For confidentiality CCMP uses AES in counter mode. For 
authentication and integrity, CCMP uses a cipher block chaining message authen- 
tication code (CBC-MAC). In 802.111, CCMP uses a 128-bit key. The block size 
is 128bits. The CBC-MAC size is 8 octets, and nonce size is 48 bits. There are 
two bytes of 802.11 overhead. The CBC-MAC, the nonce, and the 802.11 over- 
head make the CCMP packet 16 octets larger than an unencrypted 802.11 packet. 
Although slightly slower, the larger packet is not a bad exchange for increased 
security. 

The CCMP protects some fields that are not encrypted. The additional parts 
of the 802.11 frame that are protected are known as additional authentication 
data (AAD). AAD includes the packet source and destination and protects against 
attackers replaying packets to different destinations. 

The 802.1X provides a framework to authenticate and authorize devices 
connecting to the network. It prevents access to the network until such devices 
pass authentication. The 802.1X also provides a framework to transmit key 
information between authenticator and supplicant. For 802.111, the access point 
takes the role of the authenticator and the client card the role of supplicant. The 
supplicant authenticates with the authentication server through the authentica- 
tor. In 802.1X, the authenticator enforces authentication. The remote authentica- 
tion dial-in user service (RADIUS) protocol (see Section 13.9) is typically used 
between authenticator and authentication server. Once the authentication server 
concludes authentication with the supplicant, the authentication server informs 
the authenticator of the successful authentication and passes established keying 
material to the authenticator. At that point, the supplicant and authenticator share 
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established key material through extensive authentication protocol over LANs 
(EAPOL)-key exchange. If all exchanges have been successful, the authenticator 
allows traffic to flow through the controlled port giving the client access to the 
network. 

The 802.111 EAPOL-key exchange uses a number of keys and has a key 
hierarchy to divide initial key material into useful keys. The two key hierarchies 
are: pair-wise key hierarchy and group key hierarchy. In the 802.111 specification, 
these exchanges are referred to as the 4-way handshake and the group key hand- 
shake. The 4-way handshake does several things: 


* Confirms the pairwise master key (PMK) between the suppliant and 
authenticator 


Establishes the temporal keys to be used by the data-confidentiality protocol 


Authenticates the security parameters that were negotiated 


Performs the first group key handshake 


Provides keying material to implement the group key handshake 


Wireless clients often roam back and forth between access points. This has 
a negative effect on the system performance. Key caching reduces the load on the 
authentication server and reduces the time required to get connected to the net- 
work. The basic concept behind the key caching is for a client and access point to 
retain a security association when client roams away from the access point. When 
the client roams back to the access point, the security association can be restarted. 

Preauthorization enables a client to establish a PMK security association to 
an access point with which the client has yet not been associated. Preauthorization 
provides a way to establish a PMK security association before a client associates. 
The advantage is that the client reduces the time that it is disconnected from the 
network. Preauthorization has limitations. Clients performing preauthorization 
will add load to the authorization server. Also, since preauthorization is done at 
the IEEE 802 layer, it does not work across IP subnets. 
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The ANSI-41 authentication features are independent of the air-interface protocol 
used to access the network, and subscribers are never involved in the process. 
A successful outcome of authentication occurs when it can be shown that the 
MS and the network possess identical results of a calculation performed in both 
the MS and the network. The authentication center (AC) is the primary functional 
entity in the network responsible for performing this calculation (see Chapter 7), 
although the serving system (i.e., the VLR) may also be allocated certain responsi- 
bilities. The authentication calculations are based on a set of algorithms, collectively 
known as the cellular authentication and voice encryption (CAVE) algorithm. 
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The authentication process and algorithm are based on the following two 
secret numbers: 


1. Authentication key (A-key) (64-bit) 
2. Shared secret data (SSD) (128-bit) 


The A-key is a 64-bit secret number that is the permanent key used by the 
authentication calculations in both the MS and the AC. The A-key is permanently 
installed into the MS and is securely stored at the AC in the network when a new 
subscription is obtained. 

Once the A-key is installed in the MS, it should not be displayed or retrievable. 
The MS and the AC are the only functional entities ever aware of the A-key; it is 
never transmitted over the air or passed between systems. The primary function of 
the A-key is as a parameter used in calculation to generate the SSD. 

The COUNT is a 6-bit parameter that is intended to provide additional secu- 
rity in case the A-key or SSD is compromised. The current value of the COUNT 
is maintained by both the MS and the authentication controller. The respective 
counts should generally be the same—they may not always match exactly due to 
radio transmission problems or system failures in the network. If the respective 
counts differ by a large enough range, or frequently do not match, the AC may 
assume that a fraudulent condition exists and take corrective action. Note that 
a COUNT mismatch detection does not conclusively indicate that the particular 
MS accessing the system is fraudulent — only that a clone may exist. 


13.7.1 Shared Secret Data Update 

The SSD is a 128-bit secret number that is essentially a temporary key used by 
authentication calculations in both the MS and the AC. The SSD may also be 
shared with the serving system via a number of ANSI-41 messages. The SSD is 
a semipermanent value. It can be modified by the network at any time, and the 
network can command the MS to generate a new value. 

The SSD is obtained from calculations using the A-key, the ESN, and a random 
number shared between the MS and the network. SSD calculation results in two 
separate 64-bit values, SSD A and SSD. B. SSD A is the value used for the authen- 
tication process, whereas SSD B is used for encryption algorithms for privacy and 
to encrypt and decrypt selected messages on the radio traffic channel. Figure 13.4 
shows the SSD generation process. At any time, the network can order the MS to 
update the SSD by generating the new SSD with a new SSD random number for 
security purposes. 


13.7.2 Global Challenge 

For a global and unique challenge authentication process, the ANSI-41 standard 
is used [8,9]. In a global challenge the serving system presents a numeric authen- 
tication challenge to all mobile stations that are using a particular radio control 
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Figure 13.4 SSD generation. 
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Figure 13.5 Global challenge authentication process (no SSD sharing with serving 
system). 


channel. The ANSI-41 AC verifies that the numeric authentication response from 
an MS attempting to access the system is correct. This is called a global challenge 
because the challenge indicator and random number used for the challenge are 
broadcast on the radio control channel and are used by all mobile stations access- 
ing that control channel. 

The authentication process flow diagram (when SSD is not shared with the 
serving system) is given in Figure 13.5. 


1. The serving system generates a random number (RAND) and sends it to 
the MS in the overhead message on the control channel. 
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2. MS calculates an authentication result using CAVE and transmits that result 
back to the serving system when it accesses the system for registration, call 
origination, or paging response purposes. 

3. The serving system forwards the authentication result and the random 
number to AC. 


4. The AC independently calculates an authentication result and compares it 
to the result received from the MS. If the results match, the MS is consid- 
ered successfully authenticated. If the results do not match, the MS may be 
considered fraudulent and service may be denied. 


If the SSD is shared, then the serving system performs the calculations. 


13.7.3 Unique Challenge 

In the ANSI-41 unique challenge, the authentication controller directs the serving 
system to present a numeric authentication challenge to a single MS that either is 
requesting service from the network or is already engaged in a call. The serving 
system presents the numeric authentication challenge to the MS and verifies that 
the numeric authentication response provided by the MS is correct. The unique 
challenge is so named because the challenge indicator and the random number 
used for the challenge are directed to a particular MS, whereas a global challenge 
is required by each MS. Figure 13.6 shows the basic unique challenge procedure 
for authentication when SSD is not shared. 


MS Serving System HLR/AC 
SSD A 
(2) AC authentication 
ESN result, random # (a) 
MIN random # random # 


MS authentication 
result 


MS authentication 


result (3) AC authentication result 


result = pass 
or fail 


result 


Figure 13.6 Basic unique-challenge authentication process when SSD is not shared. 
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1. The AC generates a random number and uses it to calculate an authentication 
result. The AC sends both the random number and authentication result to 
the serving system. 


2. The serving system forwards the random number to the MS. 

3. The MS calculates an authentication result and sends it to the serving system. 

4. The serving system compares the result from the AC with the result from 
the MS. If the results match, the MS is considered to have successfully 
responded to the challenge. If they do not match, the MS may be consid- 
ered fraudulent and service may be denied. Either way, the serving system 
reports the results to the AC. 


If SSD is shared, the serving system may initiate the unique challenge process and 
would report a failure to the AC. 


13.8 Security in GSM, GPRS, and UMTS 


13.8.1 Security in GSM 
GSM allows three-band phones to be used seamlessly in more than 160 countries. 
In GSM, security is implemented in three entities: 


* Subscriber identity module (SIM) contains IMSI, TMSI, PIN, MSISDN, 
authentication key К; (64-bit), ciphering key (Ку) generating algorithm A8, 
and authentication algorithm A3. SIM is a single chip computer containing 
the operating system (OS), the file system, and applications. SIM is pro- 
tected by a PIN and owned by an operator. SIM applications can be written 
with a SIM tool kit. 


GSM handset contains ciphering algorithm AS. 


Network uses algorithms A3, A5, A8; K; and IDs are stored in the authen- 
tication center. 


Both A3 and A8 algorithms are implemented on the SIM. The operator can 
decide which algorithm to use. Implementation of an algorithm is independent of 
hardware manufacturers and network operators. 

AS is a stream cipher. It can be implemented very efficiently on hardware. Its 
design was never made public. A5 has several versions: A5/1 (most widely used 
today), А5/2 (weaker than A5/1; used in some countries), and A5/3 (newest ver- 
sion based on the Kasumi block cipher). 

The authentication center contains a database of identification and authen- 
tication information for subscribers including IMSI, TMSI, location area identity 
(LAI), and authentication key (Ki). It is responsible for generating (RAND), 
response (RES), and ciphering key (К) which are stored in HLR/VLR for authen- 
tication and encryption processes. The distribution of security credentials and 
encryption algorithms provides additional security. 
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GSM uses information stored on the SIM card within the phone to provide 
encrypted communications and authentication. GSM encryption is only applied 
to communications between a mobile phone and the base station. The rest of the 
transmission over the normal fixed network or radio relay is unprotected, where 
it could easily be eavesdropped or modified. In some countries, the base station 
encryption facility is not activated at all, leaving the user completely unaware of 
the fact that the transmission is not secure. 

GSM encryption is achieved by the use of a shared secret key. If this key is 
compromised it will be possible for the transmission to be eavesdropped and for 
the phone to be cloned (i.e., the identity of the phone can be copied). The shared 
secret key could easily be obtained by having physical access to the SIM, but this 
would require the attacker to get very close to the victim. However, it has been 
shown by research that the shared secret key can be obtained over the air from 
the SIM by transmitting particular authentication challenges and observing the 
responses. 

If the base station can be compromised then the attacker will be able to 
eavesdrop on all the transmission being received. The attacker will also have 
access to the shared secret keys of all the mobile phones that use the base station, 
thus allowing the attacker to clone all of the phones. 

Authentication in the GSM system is achieved by the base station sending 
out a challenge to the mobile station. The MS uses a key stored on its SIM to 
send back a response that is then verified. This only authenticates the MS, not the 
user. 

A 64-bit key is divided to provide data confidentiality. It is not possible to 
encrypt all the data; for example, some of the routing information has to be sent 
in clear text. 


GSM Token-based challenge 

The security-related information consisting of triplets of RAND, signature 
response (SRES), and К, are stored in the VLR. When a VLR has used a token to 
authenticate an MS, it either discards the token or marks it used. When a VLR 
needs to use a token, it uses a set of tokens that is not marked as used in prefer- 
ence to a set that is marked used. 

When a VLR successfully requests a token from the HLR or an old VLR, 
it discards any tokens that are marked as used. When an HLR receives a request 
for tokens, it sends any sets that are not marked as used. Those sets shall then 
be deleted or marked as used. The system operator defines how many times a set 
may be reused before being discarded. When HLR has no tokens, it will query the 
authentication center for additional tokens. 

The token-based challenge can be integrated into various call flows (e.g., reg- 
istration, handoff). It is described separately here for clarity. Figures 13.7 and 13.8 
show the call flows of token-based challenges. 
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Figure 13.7 GSM token-based unique challenge. 


1. The serving system sends a RAND to the MS. 


2. The MS computes the SRES using RAND and the authentication key (K;) 
in the encryption algorithm. 


. The MS transmits the SRES to the serving system. 

. The MSC sends a message to the VLR requesting authentication. 

. The VLR checks the SRES for validity. 

. The VLR returns the status to the MSC. 

. The MSC sends a message to the MS with a success or failure indication. 


NAUA оо 


Both GSM and North American systems use the international mobile 
equipment identity (IMEI) stored in the equipment identity register (EIR) 
(see Chapter 7) to check malfunctions and fraudulent equipment. The EIR 
contains a valid list (list of valid mobiles), a suspect list (list of mobiles under 
observation), and a fraudulent list (list of mobiles for which service is barred) 
(see Figure 13.9 for call flow). 


13.8.2 Security in GPRS 

The general packet radio service(GPRS) allows packet data to be sent and received 
across a mobile network (GSM). GPRS can be considered an extension to the 
GSM network to provide 3G services. GPRS has been designed to allow users to 
connect to the Internet, and as such is an essential first step toward 3G networks 
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Figure 13.8 GSM token-based unique challenge with ciphering. 


for all mobile operations. In GPRS, TMSI is replaced by P-TMSI and P-TMSI 
signature as alternative identities. The HLR GPRS register maps between internet 
protocol (IP) addresses and IMSI. 

GPRS security functionality is equivalent to the existing GSM security. Authen- 
tication and encryption setting procedures are based on the same algorithms, keys, 
and criteria as in GSM systems. 

GPRS provides identity confidentiality to make it difficult to identify the user. 
This is achieved by using a temporary identity where possible. When possible, 
confidentiality also protects dialed digits and addresses. As in GSM, the device is 
authenticated by a challenge-response mechanism. This only verifies that the smart 
card within the device contains the correct key. 

GPRS does not provide end-to-end security so there is a point where the data 
is vulnerable to eavesdropping or attack. If this point can be protected, e.g., in a 
physically secure location, this is not a problem. However, if end-to-end security 
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Figure 13.9 Equipment identity check. 


is required, there are other standards that can be used over GPRS; such as the 
wireless application protocol (WAP) and Internet protocol security (IPSec). 

In GPRS authentication is performed by serving GPRS support node (SGSN) 
instead of VLR. The encryption is not limited to radio part, but it is up to SGSN. An 
IP address is assigned after authentication and ciphering algorithm negotiation. 


13.8.3 Security in UMTS 
The security in universal mobile telecommunications services (UMTS) is built upon 
the security of GSM and GPRS. UMTS uses the security features from GSM that 
have proved to be needed and robust. UMTS security tries to ensure compatibility 
with GSM in order to ease interworking and handoff between GSM and UMTS. 
The security features in UMTS correct the problems with GSM by addressing its 
real and perceived security weaknesses. New security features are added as neces- 
sary for new services offered by UMTS and to take into account the changes in 
network architecture. In UMTS the SIM is called UMTS SIM (USIM). 

UMTS uses public keys. In UMTS mutual authentication between the mobile 
and BS occurs; thus there is no fake BS attack. UMTS has increased key lengths 
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and provides end-to-end security. The other security features of UMTS are listed 
below: 
• Subscriber individual key К; 
* Authentication center and USIM share 
* User-specific secret key K, 
e Message authentication functions f1, f2 
e Key generating functions f3, f4, fs 
* The authentication center has a random number generator. 
* The authentication center has a scheme to generate fresh sequence numbers. 
* USIM has a scheme to verify freshness of received sequence numbers. 
e Authentication functions f4, f» are: 
* MAC (XMAC); 
e RES (XRES). 
* Key generating functions f3, f4, fs are: 
e f3: ciphering key CK (128 bit); 
* f4: integrity key IK (128 bit) and 
e fs: anonymity key AK (128 bit). 
* Key management is independent of equipment. Subscribers can change 
handsets without compromising security. 


* Assure user and network that CK/IK have not been used before. 


* For operator specific functions, UMTS provides an example called Milenage 
based on the Rijndael block cipher. 


* Integrity function fo and ciphering function fg are based on the Kasumi 
block cipher. 


13.9 Data Security 
The primary goals in providing data security are confidentiality, integrity, and avail- 
ability. Confidentiality deals with the protection of data from unauthorized disclosures 
of customers and proprietary information. Integrity is the assurance that data has not 
been altered or destroyed. Availability is to provide continuous operations of hard- 
ware and software so that parties involved can be assured of uninterrupted service. 

In this section, we focus upon commonly used data security methods including 
firewalls, encryption, and authentication protocols. 


13.9.1 Firewalls 
Firewalls have been used to prevent intruders from securing Internet connection 
and making unauthorized access and denial of service attacks to the organization 
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network. This could be for a router, gateway, or special purpose computer. The 
firewalls examine packet flowing into and out of the organization network and 
restrict access to the network. There are two types of firewalls: (1) packet filtering 
firewall, and (2) application-level gateway. 

The packet filter examines the source and destination address of packets passing 
through the network and allows only the packets that have acceptable addresses. The 
packet filter also examines IP addresses and TCP (transmission control protocol) 
ports. The packet filter is unaware of applications and what an intruder is trying to 
do. It considers only the source of data packets and does not examine the actual data. 
As a result, malicious viruses can be installed on an authorized user computer, giving 
the intruder access to the network without authorized user knowledge. 

The application-level gateway acts as an intermediate host computer between 
the outside client and the internal server. It forces everyone to login to the gateway 
and allows access only to authorized applications. The application-level gateway 
separates a private network from the rest of the Internet and hides individual com- 
puters on the network. This type of firewall screens the actual data. If the message 
is deemed safe, then it is sent to the intended receiver. These firewalls require more 
processing power than packet filters and can impact network performance. 


13.9.2 Encryption 
Encryption is one of the best methods to prevent unauthorized access of an intruder. 
Encryption is a process of distinguishing information by mathematical rules. The 
main components of an encryption system are: (1) plaintext (not encrypted mes- 
sage), (2) encryption algorithm (works like a locking mechanism to a safe), (3) key 
(works like the safe’s combination), and (4) ciphertext (produced from plaintext 
message by encryption key). 

Decryption is the process that is the reverse of encryption. It does not always 
use the same key or algorithm. Plaintext results in decryption. The following types 
of keys are used in encrypting data. 


Secret Key (symmetric encryption) 

Both sender and recipient share a knowledge of the same secret key. The scrambling 
technique is called encryption. The message is referred to as plaintext or clear text, 
and the encrypted version of it is called ciphertext. The encryption of a plaintext x 
into a ciphertext y using a secret key eg is given as (see Figure 13.10): 


у = ерх) Ciphertext 
The corresponding decryption yields 
х =d,(y) Plaintext 


where: d, is the decryption key 
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Figure 13.10 Encryption using secret key. 


Ideally, the encryption scheme should be such that it cannot be broken 
at all. Because there are no practical methods of achieving such an uncondi- 
tional security, encryption schemes are designed to be computationally secure. 
The encryption and decryption algorithms use the same key, and, hence, such 
algorithms are called symmetric key algorithms. The symmetric key algorithm 
is vulnerable to interception and key management is a challenge. The strength 
of this algorithm depends upon length of key. Longer keys are more difficult to 
break. If the length of a secret key is n bits, at least 2”~! steps would be required 
to break the encryption. 

The data encryption standard (DES) defined by US NIST performs encryption 
in hardware thereby speeding up the encryption and decryption operation. Addi- 
tional features of DES are: 


1. DES is a block cipher and works on a fixed-size block of data. The message 
is segmented into blocks of plaintext, each comprising 64 bits. A unique 
56-bit key is used to encrypt each block of plaintext into a 64-bit block 
of ciphertext. The receiver uses the same key to perform the decryption 
operation on each 64-bit data block it receives, thereby reassembling the 
blocks into a complete message. 

2. The larger the key, the more difficult it is for someone to decipher it. DES 
uses a 56-bit key and provides sufficient security for most commercial 
applications. Triple-DES is the extended version of DES which applies DES 
three times with two 56-bit keys. 


International data encryption algorithm (IDEA) is a block cipher method 
similar to DES. It operates on 64-bit blocks of plaintext and uses a 128-bit key. 
The algorithm can be implemented either in hardware or software. It is three 
times faster than DES and is considered superior to DES. 
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The key sizes used in current wireless systems are not sufficiently large 
enough for good security. IS-136 uses a 64-bit A-key that is secure, but is still 
considered to be weak. 


Public Key (or asymmetric encryption) 

Public key encryption uses longer keys than does symmetric encryption. The key 
management problem is greatly reduced because the public key is publicized and 
the private key is never distributed. There is no need to exchange keys. 

In a public key system, two keys are used, one for encrypting and one for 
decrypting. The two keys are mathematically related to each other but know- 
ing one key does not divulge the other key. The two keys are called the “public 
key” and the “private key” of the user. The network also has a public key and a 
private key. 

The sender uses a public key to encrypt the message. The recipient uses its 
private key to decrypt the message. Public key infrastructure (РКІ) is a set of hard- 
ware, software, organizations, and policies to public key encryption work on the 
Internet. There are security firms that provide PKI and deploy encrypted channels 
to identify users and companies through the use of certificates— VeriSign Inc. 
Xcert offers products based on PKI. 


Public Key Algorithms 


Rivet-Shamir-Adleman (RSA) Algorithm The RSA algorithm [7] is based on 
public key cryptography. The pretty good privacy (PGP) version of RSA is a pub- 
lic domain implementation available for noncommercial use on the Internet in 
North America. It is often used to encrypt e-mail. Users make their public keys 
available by posting them on web pages. Anyone wishing to send an encrypted 
message to that person copies the public key from the web page into the PGP soft- 
ware and sends the encrypted message using the person’s public key. 
Two interrelated components of the RSA are (see Figure 13.11): 


1. Public key and the private key 
2. The encryption and decrypting algorithm 


Source: S Receiver: R 
Kp : public key Ciphertext: K,(m) K,: secret key 
Plaintext m 


RSA encryption RSA decryption 


Plaintext: m = К; [Kp(m)] 


Figure 13.11 RSA algorithm operation. 
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Steps in the RSA algorithm are: 


* Choose two large prime numbers, p and q (RSA labs recommend that the 
product of p and д be on the order of 768 bits for personal use and 1024 bits 
for corporate use). 


e Compute n = pq and z = (p — 1) X (q — 1). 

e Choose a number, e, less than n, which has по common factors (other than 1) 
with z (in this case e and z are the prime numbers). 

* Find a number d such that ed — 1 is exactly divisible by z. 


* The public key available to the world is the pair of numbers (n, е); and the 
private key is the pair of numbers (л, d). 


Encrypted value m* mod(n) = C (13.1) 


Plaintext m = Сӣ mod(n) (13.2) 


Example 13.1 


Using the prime numbers p = 5 and q = 7, generate public and private keys for 
the RSA algorithm. 


Solution 


6 п = рд = 5 х7 = 35,5 = (р – 1)44 = 1) =4х6= 24 

* choose e = 5, because 5 and 24 have no common factors except 1 

* choose d = 29 since ed — 1 = 5 X 29 — 1 = 144. This is exactly divisible 
by z (24). 

* Public key (35, 5) 

* Private key (35, 29) 


If the sender sends a letter e that has a numeric representation of 5, show that the 
receiver gets the letter e. The calculations are shown below. 


Sender: 
Plaintext letter m: numeric mt ciphertext: С=те mod n 
representation 
e 5 55 = 3125 10 
Receiver: 
Ciphertext cd m = cd mod n plaintext letter 
10 102 5 e 


Diffie-Hellman (DH) Algorithm The Diffie-Hellman key exchange algorithm 
was proposed in 1976. It is a widely used method for key exchange and is based 
on cyclic groups. In practice, multiplicative groups of prime field Zp or the group 
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of an elliptic curve are most often used. If the parameters are chosen carefully, the 
DH protocol is secure against passive (i.e., attacker can only eavesdrop) attacks. 
The DH key exchange is a cryptographic protocol that allows two parties that 
have no prior knowledge of each other to jointly establish a shared secret key 
over an insecure communications channel. This key can then be used to encrypt 
subsequent communications using a symmetric key cipher. The implementation 
of protocol uses the multiplicative groups of integers modulo p, where p is prime 
and g is primitive mod p. 
The algorithm works as follows (see Figure 13.12): 
1. Ron and Mike agree to use a prime number p and base g. 
2. Mike chooses a secret integer a є (2, 3, 4, ..., p — 1} and sends Ron g^ 
mod p. 
3. Ron chooses a secret integer b є (2, 3, 4, ..., p — 1} and sends Mike g^ 
mod p. 
4. Ron computes (g^ mod p)? mod p = К. 
5. Mike computes (g^ mod р)“ mod p = К. 
6. Mike and Ron use K as the secret key for encryption. 
It should be noted that only a, b and g^ = g^? are kept secret. All other values 
are sent in clear. Once Mike and Ron compute the shared secret key they can use 


it as an encryption key, known to them only, for sending messages across the same 
open communications channel. 


Example 13.2 

Determine the secret encrypting key, K, using the Diffie-Hellman key exchange 
algorithm, if two parties agree to use a prime number p = 23 and base g = 5. 
Party A selects its secret number a — 6 and party B chooses its secret number 
b = 15. 


a, 9, P 


A = g? mod p 


К = B? mod p 


К = A? mod p = (gê mod p)? mod p = (g? mod p)? mod p = B? mod p 


Figure 13.12 Diffie-Hellman key exchange algorithm. 


426 13 Security in Wireless Systems 


Solution 


1. Party A sends to party B g^ mod p = 5° mod 23 = 8. 

. Party B sends to party A g? mod p = 515 mod 23 = 19. 

. Party A computes (g? mod р)“ mod p = 196 mod 23 = 2. 
. Party B computes (g^ mod p)" mod p = 815 mod 23 = 2. 


л A о гә 


. Party А and B use К = 2 as the secret key for encryption. 


One-time Key Method 

The one-time key method is based on the generation of a new key every time data 
is transmitted. A single-use key is transmitted in a secure (encoded) mode and, 
once used, becomes invalid. In some implementations, the central system does not 
issue a key for a new connection until the user supplies the previously used key. 


Elliptic Curve Cryptography (ECC) 
The features of the ECC are discussed below: 
e ECC is a public key encryption technique that is based on elliptic curve theory. 
* ECC can be used in conjunction with most public key encryption methods, 
such as RSA and Diffie-Hellman. 
* ECC can yield a level of security with a 164-bit key, while other systems 
require a 1024-bit key. 


Because ECC helps to establish equivalent security with lower computing 
power and battery resources, it is widely used for mobile applications. 
* Many manufacturers (3COM, Cylink, Motorola, Pitney Bowes, Siemens, 
TRW, and VeriFone) have included support for ECC in their products. 


Digital Signature 

A digital signature provides a secure and authenticated message transmission 
(enabled by public key enabling (PKE)). It provides proof identifying the sender. 
The digital signature includes the name of the sender and other key contents (e.g., 
date, time, etc). The features of the digital signature method are discussed below: 


* À digital signature can be used to ensure that users are who they claim to be. 


* The signing agency signs a document, m, using a private decryption key, ав, 
and computes a digital signature dp(rn). 

* The receiver uses the agency's public key, eg, and applies it to the digital 
signature, dg(m), associated with the document, m, and computes ep[dp(m)] 
to produce m. 


* This algorithm is very fast, especially with hash functions. 
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* Itis only used in message authentication codes when a secure channel is used 
to transmit unencrypted messages, but needs to verify their authenticity. 


* It is also used in the secure channels of a secure socket layer (SSL). 


13.9.3 Secure Socket Layer 

SSL is a protocol that uses a session-level layer in the Internet to provide a secure 
channel. SSL is widely used on the web. In SSL, the server sends its public key 
and encryption technique to be used to the browser. The browser generates a key 
for the encryption technique and sends it to the server. Communications between 


server and browser are encrypted using the key generated by the browser. 
The features of SSL are: 


* Negotiate cipher suite which is a collection of encryption and authentication 
algorithms. 


* Bootstrapped secure communication, which eliminates the need for third 
parties, and uses unencrypted communications for initial exchanges. 


* Public-key crypto for secret keys and secret-key crypto for data. 


13.9.4 IP Security Protocol (IPSec) 

IPSec is a widely used protocol that can be employed with other application layer 
protocols (not just for web applications such as SSL). The operations of IPSec 
between A and B involve: 


* A and B generate and exchange two random keys using Internet key 
exchange (IKE). 


* A and B combine the two numbers to create an encryption key to be used 
between them. 


* A and B negotiate the encryption technique to be used such as DES or 3DES. 


* A and B then begin transmitting data using either the transport mode in 
which only the IP payload is encrypted or tunnel mode in which the entire 
IP packet is encrypted. 


13.9.5 Authentication Protocols 

Authentication of a user is used to ensure that only the authorized user is permitted 
into the network and into the specific resource inside the network. Several methods 
used for authentication are user profile, user account, user password, biometrics, 
and network authentication. 

The user profile is assigned to each user account by the manager. The user pro- 
file determines the limits of a user in accessing the network (i.e., allowable login day 
and time of day, allowable physical locations, allowable number of incorrect login 
attempts). The user profile specifies access details such as data and network resources 
that a user can access and type of access (e.g., read, write, create, delete). The form 
of access to the network may be based on the password, card, or one-time password. 
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With a biometric-based form of access, the user can gain access based on finger, hand, 
or retina scanning by a biometric system. It is convenient and does not require remem- 
bering a password. Biometric-based methods are used in high security applications. 

Network authentication requires a user to login to an authentication server, 
which checks user ID and password against a database, and issues a certificate. The 
certificate is used by the user for all transactions requiring authentications. Kerbe- 
ros is one of many commonly used authentication protocols. Two other authenti- 
cation protocols that have been used are remote authentication dial-in user service 
(RADIUS) and terminal access controller access control system+(TACACS+). 

Kerberos is a secret-key network authentication protocol that uses a DES cryp- 
tographic algorithm for encryption and authentication. It was designed to authenticate 
requests for network resources. Kerberos is based on the concept of a trusted third party 
that performs secure verification of users and services. The primary use of Kerberos is 
to verify that users and the network services they use really are who and what they 
claim to be. To accomplish this, a trusted Kerberos server issues tickets to users. These 
tickets, which have a limited life span, are stored in a user’s credential cache. The tickets 
are used in place of standard user name and password authentication mechanisms. 

RADIUS is a distributed client/server system that secures the network against 
unauthorized access. In the Cisco implementation, RADIUS clients run on Cisco 
routers and send authentication requests to a server. The central server contains 
all user authentication and network service access information. RADIUS is the 
only security protocol supported by wireless authentication protocol. 

TACACS + (improved TACAS) is a security application that provides centralized 
validation of users attempting to gain access to a router or network access server. 
TACACS- services are maintained іп a database on a TACACS+ daemon running on 
a UNIX, Windows NT, Window 2000 workstation. ТАСАСЅ+ provides for separate 
and modular authentication, authorization, and accounting facilities. 

A network administrator may allow remote users to have network access 
through public services based on remote-access solutions. The network must be 
designed to control who is allowed to connect to it, and what they are allowed 
to do once they get connected. The network administrator may find it necessary 
to configure an accounting system that tracks who logs in, when they log in, and 
what they do once they have logged in. 

Authentication, authorization, and accounting (AAA) security services 
provide a framework for these kinds of access control and accounting functions. 
The user dials into an access server that is configured with challenge handshake 
authentication protocol (CHAP). The access server prompts the user for a name 
and password. The access server authenticates the user's identity by requiring 
the user name and password. This process of verification to gain access is called 
authentication. The user may now be able to execute commands on that server 
once it has been successfully authenticated. 

The server uses a process for authorization to determine which commands 
and resources should be made available to that particular user. Authorization asks 
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the question, what privileges does this user have? Finally, the number of login 
attempts, the specific commands entered, and other system events can be logged 
and time-stamped by the accounting process. Accounting can be used to trace a 
problem, such as a security breach, or it may be used to compile usage statistics or 
billing data. Accounting asks questions such as: what did this user do and when 
was it done? The following are some of the advantages in using AAA: 


* AAA provides scalability. Typical AAA configurations rely on a server or 
group of servers to store user names and passwords. This means that local 
databases don't have to be built and updated on every router and access 
server in the network. 


e AAA supports standardized security protocols — TACACS +, RADIUS, and 
Kerberos. 


* AAA lets the administrator configure multiple backup systems. For example, 
an access server can be configured to consult a security server first and a 
local database second. 


* AAA provides an architectural framework for configuring three different 
security features: authentication, authorization, and accounting. 


13.10 Air Interface Support for Authentication Methods 
The various air interfaces used for PCS and cellular systems in Europe and North 
America support one or more of the different authentication methods. Only the 
older AMPS supports MIN/ESN as the authentication method. All of the digital 
systems in North America, except for G5M1900, support SSD. GSM supports 
only token-based authentication. UMTS supports token-based authentication 
along with some advanced security features. cdma2000 supports SSD. Table 13.1 
summarizes this information. 


Table 13.1 Summary of authentication methods for PCS and cellular systems in 
Europe and North America. 


Type of Authentication 


Type of 
voice privacy 

Air interface MIN/ESN SSD Token-based Public key supported 
AMPS х None 
CDMA 15-95 x Strong 
TDMA IS-136 x Strong 
GSM x Strong 
cdma2000 x Strong 


UMTS X Strong 
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13.11 Summary of Security in Current Wireless Systems 


Each of the security methods satisfies the security needs for a wireless system in 
different ways. The older AMPS has poor security. The digital systems using either 
SSD or tokens meet most of the security needs of the wireless systems except full 
anonymity. The public-key-based security system meets all the requirements, includ- 
ing anonymity, but is not yet fully implemented. Privacy of communications is 
maintained via encryption of signaling, voice, and data for the digital systems. The 
AMPS sends all data in the clear and has no privacy unless the user adds it to the 
system. The following is a summary of the support for security requirements for 


the PCS and cellular systems in North America and Europe (see Table 13.2). 


Table 13.2 Summary of support for security requirements for PCS and cellular 
systems in Europe and North America. 


MIN/ESN 


Feature (AMPS) 


Privacy of Communication 


* Signaling None 
* Voice None 
* Data None 


Billing Accuracy 


* Accuracy None: phones 


can be cloned 


Privacy of User Information 


* Location None 

* User ID None 

* Calling None 
Pattern 

Theft Resistance of MS 

* Over the air None 

* From Depends on 
Network system design 


SSD 


High: messages 
are encrypted 
High: voice is 
encrypted 
High: data is 
encrypted 


High: if authen- 
tication is done 


Moderate: 
using IMSI/ 
TMSI 


Moderate: 
using IMSI/ 
TMSI 

High: using 
TMSI and 
encryption 


High 
Depends on 
system design 


Token-based 


High: messages 
are encrypted 
High: voice is 
encrypted 
High: data is 
encrypted 


High: if authen- 
tication is done 


Moderate: 
using IMSI/ 
TMSI 


Moderate: 
using IMSI/ 
TMSI 

High: using 
TMSI and 
encryption 


High 
Depends on 
system design 


Public key 


High: messages 
are encrypted 
High: voice is 
encrypted 
High: data is 
encrypted 


High: if authen- 
tication is done 


High: public key 
provides full 
anonymity 


High: public key 
provides full 
anonymity 
High: public key 
provides full 
anonymity 


High 
Depends on 
system design 


(Continued) 
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Feature 


* From inter- 
connection 


* Cloning 


Handset Design 


Law Enforce- 
ment Needs 


MIN/ESN 
(AMPS) 


Depends on 

system design 
None 

Algorithm run 


in microproces- 
sor of handset 


Easily met on 
the air interface 


SSD 


Depends on 
system design 


High 
Algorithm run 


in microproces- 
sor of handset 


Must wiretap at 
the switch 


Summary of Security in Current Wireless Systems 


Token-based 
Depends on 
system design 

Medium 
Algorithm run 


in microproces- 
sor of handset 


Must wiretap at 
the switch 


431 


Public key 


Depends on 
system design 


High 


Microprocessor 
speed may be 
fast enough 

for some 
algorithms 


Must wiretap at 
the switch 


(if van is nearby 
to MS or at the 
Switch) 


13.11.1 Billing Accuracy 

Since AMPS phones can be cloned from data intercepted over the radio link, billing 
accuracy for AMPS is low to none. For other systems, when authentication is done, 
billing accuracy is high. If a system operator gives service before authentication or 
even if authentication failure occurs, then billing accuracy will be low. 


13.11.2 Privacy of Information 

Privacy of user information is high for the public key system, moderate for the 
SSD and token-based systems (since sometimes IMSI is sent in cleartext) and low 
for the AMPS. 


13.11.3 Theft Resistance of MS 

MS theft resistance is high over-the-air transmission for all systems except the 
AMPS. Since the token-based system in GSM doesn't support a call history count, 
it has a lower resistance to cloning than the SSD or public key systems. Earlier 
AMPS phones using MIN/ESN have no resistance to cloning, but now they support 
SSD. The resistance of stealing data from network interconnects or from operations 
systems (OS) in the network depends on the system design. 


13.11.4 Handset Design 
All of the authentication and privacy algorithms easily run in a standard 8-bit 
microprocessor used in mobile stations, except the public key systems. 


13.11.5 Law Enforcement 
The AMPS is relatively easy to tap at the air interface. The digital systems will 
require a network interface since privacy is maintained over the air interface. 
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The network requirements currently meet most of the needs of the law enforcement 
community doing legal wiretaps. 


13.12 Summary 
In this chapter, we discussed the requirements for strong privacy and authentication 
of wireless systems, and outlined how each of the cellular and PCS systems supports 
these requirements. Four levels of voice privacy were presented. We then identified 
requirements in the areas of privacy, theft resistance, radio system requirements, 
system lifetime, physical requirements as implemented in mobile stations, and law 
enforcement needs. We also examined different methods of authentication that are 
in use to satisfy these needs. 

The chapter described the requirements that any cryptographic system should 
meet to be suitable for use in a ubiquitous wireless network. We also examined 
security models and described how they met security requirements. 


Problems 
13.1 Define the equivalent to wireline and commercially secure systems. 


13.2 What are the privacy requirements of a wireless telephone user? 


13.3 Define the methods that are used in wireless systems to provide privacy 
and security. 


13.4 What are the main differences between global and unique challenge 
methods used in North American cellular systems? 


13.5 Describe the token-based authentication scheme used in the GSM system. 
13.6 Describe the public-key-based authentication scheme. 


13.7 Describe how you would design a mobile station so that the security data 
stored in the terminal is tamper resistant. 


13.8 Describe data encryption keys. 


13.9 Describe the call flows that would be necessary for a shared secret key 
registration when the old VLR must first be queried for IMSI before the 
correct HLR can be queried. 


13.10 Describe the call flows that would be necessary for a token-based 
registration in GSM when the old VLR cannot be queried for IMSI and 
the network must request that the mobile station send its IMSI before 
messages can be exchanged with the HLR. 
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CHAPTER 14 
Mobile Network and Transport Layer 


14.1 Introduction 

In this chapter, we first introduce concepts of the Internet and briefly discuss IPv4 
and IPv6. We then focus on mobile internet protocol (MIP) and session initiation 
protocol (SIP) designed to provide a variety of IP data services in mobile networks 
[1-9]. We conclude the chapter by discussing transmission control protocol (TCP) 
enhancements for mixed networks (wireline and wireless). The chapter is primar- 
ily intended for those readers who are not familiar with the Internet and TCP/IP. 
The chapter may be omitted by those who have sufficient exposure to TCP/IP and 
the Internet. 

The Internet is a global network that supports a variety of interpersonal 
and interactive multimedia applications and operates in a packet-switched mode 
[15,20]. The Internet consists of a large number of different access networks 
that are interconnected by a global internetwork. Associated with each access 
network is the Internet Service Provider (ISP) network, intranet, enterprise net- 
work, local area network (LAN), and so on, that is referred to as a gateway. 
The global internetwork consists of an interconnected set of regional, national, 
and international networks all of which are joined together using high bit rate 
leased lines and routers. Each of the routers in the interconnection network 
has a number of access networks attached to it by means of access gateways. 
Each access network is an LAN with a single netid and the address resolution 
protocol (ARP) in each host is used to carry out routing within the access net- 
work. Hence, the ARP in each gateway acts as an agent (proxy ARP) on behalf 
of all hosts at the site/campus to relay packets to and from the interconnection 
network. 

ARP and reverse address resolution protocol (RARP) are specialized pro- 
tocols used only with certain types of network interfaces (such as Ethernet and 
token-ring) to convert between the addresses used by the IP layer and the addresses 
used by the network interfaces. 

The interconnection network comprises four routers (R1-R4) that are inter- 
connected by, say, leased lines (refer to Figure 14.1). Each leased line has a pair 
of numbers associated with it. The first number is used as a leased line identifier 
and the second is referred to as the cost of the line. Let us assume that the host 
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Netid 2 Interconnection Network 


O 
24 


Access network 
(e.g., site/campus LAN) 


Netid 1 


297 


Netid 4 


R = Router 
G = Access Gateway 


Figure 14.1 Example of internetwork topology. 


A on netid 1 wants to send a datagram to host B on netid 3. On determining 
that the destination zetid in the datagram header is for a different netid from 
its own, gateway G1 forwards the datagram to router R1 over the connect- 
ing line/link. On receipt of the datagram, R1 proceeds to forward it first to R3 
over the interconnection network and then it is forwarded by R3 to G3. At that 
point, the IP in G3 knows how to route the datagram to host B using the hostid 
part of the destination IP address and the related media access control (MAC) 
address of the host B in its ARP cache. Thus, each IP address has two parts: netid 
that is centrally managed by the Internet information center and hostid that is 
allocated by the local administrator of the access network to which the host is 
attached. 


14.2 Concept of the Transmission Control Protocol/Internet 
Protocol Suite in Internet 

Assume a process associated with port 1 at host A wishes to send a message to 
another process associated with port 3 at host B (see Figure 14.2). The process at 
host A hands the message to the TCP with instructions to send it to host B, port 
3. TCP hands the message to IP with instructions to send it to host B. Note that 
IP need not to be told the identity of the destination port. All it needs to know is 
that the data is intended for host B. Next, IP hands the message down to the net- 
work access layer (NAP) (e.g., Ethernet logic) with instructions to send it to router 
J that is the first hop on the way to B. To control this operation, control informa- 
tion as well as user data must be transmitted. 
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Host A Host B 


Port or 
Service access point (SAP) 


Logical Connection 
(TCP Connection) 


Global Network address 


Network Access Logical connection Network Access 
Protocol (NAP) #1 (e.g., virtual circuit) ,/ Protocol #2 


Physical Router J Physical 


Sub network attachment p as 
point address NAP1 NAP2 


Figure 14.2 TCP/IP concept. 


We assume the network interface card in all the hosts that are attached to an 
access network communicate with other hosts using the TCP/IP protocol stack. 
The various access networks have different operational parameters associated 
with them in terms of their bit rate, frame format, maximum frame size, and 
type of address that are used. Therefore, the routing and forwarding operations 
associated with gateway are performed at the network layer. In the TCP/IP 
protocol stack the network layer protocol is IP. In order to transfer packets of 
information from one host to another, the IP in the two hosts together with the IP 
in each Internet gateway and router are involved in performing the routing and 
other harmonization functions necessary. The IP in each host has a unique address 
assigned to it. 

TCP/user datagram protocol (UDP) passes the block of information to its 
local IP together with the IP address of the intended recipient. The source IP adds 
the destination and source IP addresses to the head of the block, together with an 
indication of the source protocol (TCP or UDP), to form an IP datagram. The IP 
forwards the datagram to its local gateway. 

The TCP/IP protocol suite allows computers of all sizes, supplied by 
many different computer vendors, running totally different operating systems, 
to communicate with each other. TCP/IP is a 4-layer system (PL, LL, NL, TL) 
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Source Host Destination Host 
Application PDUs 
AL | Application P» Application 
TCP/UDP PDUs 
TL | TCP/UDP > TCP/UDP 


Access Network 
Gateway 


Access Network 
Gateway 


Access Network Y 


ІР : Internet Protocol 
LP : Link Protocol 

PL : Physical layer 
LL : Link Layer 

AL : Application layer 
NL : Network layer 
TL : Transport layer 


Figure 14.3 Internet networking components and protocols. 


(see Figure 14.3). The link layer (LL) normally includes the device driver in the 
operating system and the corresponding network interface card in the computer. 
Together they handle all the hardware details of physically interfacing with cable 
(or whatever type media is being used). 

The network or internet layer handles the movement of packets around the 
network. Internet protocol (IP), Internet control message protocol (ICMP), and 
Internet group management protocol (IGMP) are used at the network layer. 

IP is the workhorse protocol of the TCP/IP protocol suite. All TCP, UDP, 
ICMP, and IGMP data get transmitted as IP datagrams [10,11,19,30]. IP provides 
an unreliable connectionless datagram delivery service. By unreliable we mean 
there are no guarantees that an IP datagram successfully gets to its destination. IP 
provides a best effort service when something goes wrong, such as a router tem- 
porarily running out of buffers. IP has a simple error handling algorithm: throw 
away the datagram and try to send an ICMP message back to source. The term 
connectionless means that the IP does not maintain any state information about 
successive datagrams. Each datagram is handled independently from all other 
datagrams. IP datagrams are delivered out of order. 
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ICMP is an adjunct to IP. It is used by an IP layer to exchange error messages 
and other vital information with the IP layer in another host or router. IGMP is 
used with multicasting: sending a UDP datagram to multiple hosts. 

The transport layer (TL) provides a flow of data between two hosts, for the appli- 
cation layer above. In the TCP/IP protocol suite two different transport protocols, TCP 
and UDP, are used. TCP provides a reliable flow of data between two hosts. It is con- 
cerned with data segmentation passed to it from application into appropriately sized 
segments for the network layer below, acknowledging received packets, setting time- 
outs to make certain the other end acknowledges packets that are sent, and so on. 

UDP provides a much simpler service to the application layer. It sends pack- 
ets of data called datagrams from one host to the other, but there is no guarantee 
that the datagrams will reach the other end. Any desired reliability must be added 
by the application layer. 


14.3 Network Layer in the Internet 

The IP provides the basis for the interconnections of the Internet [16-18]. IP is a 
datagram protocol. The packets contain an IP header. The basic header, without 
options, is shown in Figure 14.4. 

The version field contains the version of IP—IPv4 or IPv6. The internet beader 
length (IHL) field specifies the actual length of the header in multiples of 32-bit words. 
The minimum length is 5. The maximum permissible length is 15. The type of service 
(TOS) field allows an application protocol/process to specify the relative priority 
of the application data and the preferred attributes associated with the path to be 


4 8 16 32 
Type of Service 
(TOS) 
Identification M Fragment Offset 


Total Length 


Time-to-Live Protocol Header Checksum 
Source IP Address 


Destination IP Address 


Options 


Payload (<=65,535 bytes) 


3 111 2 
Precedence p[T R| Unused | Type of Service 
Priority (0—7) High reliability 
Low Delay High Throughput 


Figure 14.4 ІР header. 
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followed. It is used by each gateway and router during the transmission and routing 
of the packet to transmit packets of higher priority first and to select a line/route that 
has the specified attributes should a choice be available. The total length field defines 
the total length of the initial datagram including the header and payload parts. When 
the contents of the initial datagram need to be transferred in multiple packets, then the 
value in this field is used by the destination host to reassemble the payload contained 
within each smaller packet—known as a fragment—into the original payload. 

The identification field enables the destination host to relate each received 
packet fragment to the same original datagram. Don’t fragment or D-bit is set 
by a source host and is examined by routers. A D-bit indicates that the packet 
should not be fragmented. More fragment or M-bit is used during the reassembly 
procedure associated with data transfers involving multiple smaller packets/frag- 
ments. It is set to 1 in all but the last packet/fragment in which it is set to 0. The 
fragment offset field is used to indicate the position of the first byte of the frag- 
ment contained within a smaller packet in relation to the original packet payload. 
All fragments except the last one are in multiples of 8 bytes. 

The time-to-live field defines the maximum time for which a packet can be 
in transit across the Internet. The value is in seconds and is set by the IP in the 
source host. It is decremented by each gateway and router by a defined amount 
and should the value become zero, the packet is discarded. The protocol field is 
used to enable the destination IP to pass the payload within each received packet 
to the same (peer) protocol that sent the data. This can be an internal network 
layer protocol such as the ICMP or a higher-layer protocol such as TCP or UDP. 
The header checksum applies just to the header part of the datagram and is a safe- 
guard against corrupted packets being routed to incorrect destinations. 

The source and destination Internet addresses indicate the sending host and 
the intended recipient host for this datagram. 

The options field is used in selected datagrams to carry additional informa- 
tion relating to security, source routing, loose source routing, route recording, 
stream identification, and time-stamp. The last field is the payload. 

A symbolic address, or name, of the form user@domain can be used instead 
of an Internet address. It is translated into an Internet address by directory tables 
that are organized along the same hierarchy as the addressing. Typically, the 
domain is of the form machine.institution.type.country. The type is edu for edu- 
cational institutions, com for companies, gov for governmental agencies, org for 
nonprofit organizations, and mil for military. The country field is omitted for the 
United States and is a two-letter country code for the other countries (e.g., fr for 
France). For instance, the author’s address is vgarg@uic.edu. 

With best-effort delivery service (optional quality of service (QoS)), IP packets 
may be lost, corrupted, delivered out-of-order, or duplicated. The upper layer entities 
should anticipate and recover on an end-to-end basis. 
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1 7 24 bits 
0 | hostid Class A 
netid = 1 to 127 = 126 networks; hostid = 0.0.0 to 255.255.255 = 16,777,214 hosts 
2 14 16 bits 
1/0 | hostid Class B | unicast 


[ 
netid — 128 to 191.255 — 16,382 networks; hostid — 0.0.0 to 255.255 — 65,534 hosts 

3 21 8 bits 

11110 | hostid Class C 
netid = 192.0 to 223.255.255 = 2,097,152 networks; hostid = 0 to 255 = 256 hosts 

4 28 bits 


1{1|1|0 Multicast Address Class D = multicast 


Figure 14.5 Internet addresses. 


14.3.1 Internet Addresses 
Three classes of Internet addresses (unicast) are used (see Figure 14.5): 


* Class A—7 bits for netid and 24 bits for hostid, they are used with networks 
having a large number of hosts (27^) 


e Class B— 14 bits for netid and 16 bits for hostid, they are used with net- 
works having a medium number of hosts (216) 


* Class C— 21 bits for netid and 8 bits for hostid, they are used with networks 
having a small number of hosts (2°) 


It should be noted that the netid and hostid with all Os or all 1s have special 
meaning. 


e An address with hostid of all Os is used to refer to the network in netid part 
rather than a host 


e An address with a netid of all Os implies the same network as the source 
network/netid 


* An address of all 1s means broadcast the packet over the source network 
e An address with a hostid of all 1s means broadcast the packet over the 
destination network in netid part 


A class A address with a netid of all 1s is used for test purposes within the 
protocol stack of the source host. It is known as the loop-back address. 
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Link Layer Protocol 


Physical Layer 


Network Point of Attachment 


AP: Application Protocol/process 

ARP: Address Resolution Protocol 
RARP: Reverse ARP 

ICMP: Internet Control Message Protocol 
IGMP: Internet Group Message Protocol 
OSPF: Open Shortest Path First 

UDP: User Datagram Protocol 

TCP: Transmission Control Protocol 


Figure 14.6 Adjunct protocols. 


14.3.2 IP Adjunct Protocols 
Figure 14.6 shows the IP adjunct protocols [25-29]. 


* Address resolution protocol (ARP) and reverse ARP (RARP) are used by IP 
in hosts that are attached to a broadcast LAN (such as Ethernet or token 
ring) in order to determine the physical MAC address of a host or gateway 
given its IP address (ARD), and, in case of the RARP, the reverse function. 


* Open shortest path first (OSPF) protocol is a routing protocol used in the 
global internetwork. Such protocols are present in each internetwork router. 
They are used to build up the contents of the routing table used to route 
packets across the global internetwork. 


* Internet control message protocol (ICMP) is used by the IP in a host or 
gateway to exchange errors and other control messages with IP in another 
host or gateway. 


* Internet group message protocol (IGMP) is used with multicasting to enable 
a host to send a copy of a datagram to the other hosts that are part of the 
same multicast group. 
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The ICMP forms an integral part of all IP implementations. It is used by 
hosts, routers, and gateways for a variety of functions, and especially by network 
management. The main functions associated with the ICMP are as follows: 

* Error reporting 

* Reachability testing 

* Congestion control 

* Route-change notification 
* Performance measuring 

* Subnet addressing 

The standard way to send an IP packet over any point-to-point link is either 
dial-up modems (e.g., asynch framing), leased lines (e.g., bit synchronous fram- 
ing), or ISDN, IS-99 CDMA (e.g., octet-synchronous framing). The link control 
protocol (LCP) runs during initial link establishment and negotiates link-level 
parameters (e.g., maximum frame size, etc.). The IP control protocol (IPCP) 
establishes the IP address of the client (the point-to-point (PPP) server, allocates a 


temporary address, or the client notifies the server of the fixed address) and nego- 
tiates for the use of TCP/IP header compression. 


14.3.3 QoS Support in the Internet 

QoS requirements include a defined minimum mean packet throughput rate and a 
maximum end-to-end packet transfer delay. To meet the varied set of QoS require- 
ments, two schemes have been standardized: 


* Integrated Services (IntServ) 
* Differentiated Services (DiffServ) 
Packets relating to different types of call/session are each allocated a different 
value in the precedence bits of the type of service (TOS) field of the IP packet header. 


This is used by routers within the Internet to differentiate between the packet flows 
relating to different types of calls. 


Integrated Services (IntServ) 
The IntServ solution defines three different classes of service: 
* Guaranteed: It specifies maximum delay and jitter, and an assured level of 
bandwidth is guaranteed. 


* Controlled load (also known as predictive): No firm guarantee is provided 
but the flow obtains a constant level of service equivalent to that obtained 
with the best-effort service at light loads. 


* Best-effort: This is intended for text-based applications. 


To cater for three different types of packet flows within each router, three 
separate output queues are used for each line— опе for each class. Appropriate 
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scheduling mechanisms are used to ensure that the QoS requirements of each class 
are met. 


Differentiated Service (DiffServ) 


Incoming packet flows relating to individual calls are classified by the router/gate- 
way at the edge of the DiffServ compliant net/Internet into one of the defined 
service/traffic classes by examining selected fields in various headers in the packet. 
The TOS field in the IP packet header is replaced by a new field called the differen- 
tiated service (DS) field. Within the DiffServ network, a defined level of resources 
in terms of buffer space within each router and the bandwidth of each output line 
is allocated to each traffic class. 


Internet Protocol version 6 (IPv6) 

Today’s Internet operates over the common network layer datagram protocol, 
Internet Protocol version 4 (IPv4). In the early 1990s, a new design of addressing 
scheme was initiated within the Internet Engineering Task Force (IETF) due to 
the recognized weaknesses of IPv4. The result was IPv6 (see Figure 14.7). The 
single most significant advantage IPv6 offers is increased destination and source 
addresses. IPv6 quadruples the number of network address bits from 32 bits in 


32 bits 


Version Traffic Class Flow Level 


Payload Length Next Header Hop Limit 
Source Address (128 bits) 


Destination Address (128 bits) 


Payload 


Version: 4-bit field to identify the IP version number 

Traffic class: 8-bit field is similar to Type of Service field in IPv4 

Flow level: This 20-bit field is used to identify a "flow" of datagrams 

Payload length: 16-bit is treated as an unsigned integer to give the 

number of bytes in the datagram 

Next header: This field identifies the protocol to which the contents 

of this datagram will be delivered (for example TCP or UDP). The field 
uses the same values as Protocol field in IPv4 header 

Hop limit: The contents of this field are decremented by one by each router 
that forwards the datagrams. If the hop limit count reaches zero, the datagram 
is discarded 

Source and destination address: 128-bit field 


Figure 14.7 IPv6. 
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IPv4 to 128 bits, which provides more than enough globally unique IP addresses 
for every network device on the planet. This will lead to network simplification, 
first, through less need to maintain a routing state within the network and second, 
through reduced need for address translation; hence, it will improve the scalability 
of the Internet. 

IPv6 will allow a return to a global end-to-end environment where the 
addressing rules of the network are transparent to applications. The current IP 
address space is unable to satisfy the potentially large increase in number of users 
or the geographical needs of Internet expansion, let alone the requirements of 
emerging applications such as Internet-enabled personal digital assistants (PDAs), 
personal area networks (РАМ), Internet-connected transportation, integrated 
telephony services, and distributed gaming. 

The use of globally unique IPv6 addresses simplifies the mechanisms used for 
reachability and end-to-end security for network devices, functionally crucial to 
the applications and services driving the demand for the addresses. 

The lifetime of IPv4 has been extended using techniques such as address 
reuse with translation and temporary use allocations. Although these techniques 
appear to increase the address space and satisfy the traditional client/server setup, 
they fail to meet the requirements of new applications. The need for an always-on 
environment to be connectable precludes these IP address conversion, pooling, 
and temporary allocation techniques, and the “plug and play” required by con- 
sumer Internet applications further increases address requirements. The flexibility 
of the IPv6 address space provides the support for private addresses but should 
reduce the use of network address translation (NAT) because global addresses are 
widely available. IPv6 reintroduces end-to-end security that is not always readily 
available throughout an NAT-based network. 

The success of IPv6 will depend ultimately on the innovative applications 
that run over IPv6. A key part of IPv6 design is its ability to integrate into and 
coexist with existing IP networks. It is expected that IPv4 and IPv6 hosts will need 
to coexist for a substantial time during the steady migration from IPv4 to IPv6, 
and the development of transition strategies, tools, and mechanisms has been part 
of the basic IPv6 design from the start. Selection of a deployment strategy will 
depend on current network environment, and factors such as the forecast of traf- 
fic for IPv6 and availability of IPv6 applications on end systems. 

IPv6 does not allow for fragmentation and reassembly at an intermediate 
router; these operations can be performed only by the source and destination. 
If an IPv6 datagram received by a router is too large to be forwarded over the 
outgoing link, the router simply drops the datagram and sends a packet too big 
ICMP message back to sender. The checksum field in IPv4 was considered redun- 
dant and was removed because the transport layer and data link layer protocols 
perform checksum. 
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FTP: File transfer protocol 

SMTP: Simple mail transport protocol 
HTTP: Hyper text transfer protocol 

PPP: Point-to-point protocol 

ARP: Address resolution protocol 

ICMP: Internet control message protocol 
UDP: User datagram protocol 

TCP: Transmission control protocol 


Figure 14.8 TCP/IP protocol suite. 


14.4 TCP/IP Suite 

The TCP/IP suite (Figure 14.8) occupies the middle five layers of the 7-layer open 
system interconnection (OSI) model (see Figure 14.9) [30]. The TCP/IP layering 
scheme combines several of the OSI layers. From an implementation standpoint, 
the TCP/IP stack encapsulates the network layer (OSI layer 3) and transport layer 
(OSI layer 4). The physical layer, the data-link layer (OSI layer 1 and 2, respec- 
tively) and application layer (OSI layer 7) at the top can be considered non-TCP/ 
IP-specific. TCP/IP can be adapted to many different physical media types. 

IP is the basic protocol. This protocol operates at the network layer (layer 3) 
in the OSI model, and is responsible for encapsulating all upper layer transport and 
application protocols. The IP network layer incorporates the necessary elements 
for addressing and subnetting (dividing the network into subnets), which enables 
TCP/IP packets to be routed across the network to their destinations. At a parallel 
level, the ARP serves as a helper protocol, mapping physical layer addresses typi- 
cally referred to as MAC-layer addresses to network layer (IP) addresses. 

There are two transport layer protocols above IP: the UDP and TCP. 
These transport protocols provide delivery services. UDP is a connectionless 
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Figure 14.9 A comparison of the OSI model and TCP/IP protocol layers. 


Data Communications 
Network 


delivery transport protocol and used for message-based traffic where sessions 
are unnecessary. TCP is a connection-oriented protocol that employs sessions for 
ongoing data exchange. File transfer protocol (FTP) and Telnet are examples of 
applications that use TCP sessions for their transport. TCP also provides the reli- 
ability of having all packets acknowledged and sequenced. If data is dropped 
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or arrives out-of-sequence, the stack’s TCP layer will retransmit and resequence. 
UDP is an unreliable service, and has no such provisions. Applications such as 
the simple mail transport protocol (SMTP) and hyper text transfer protocol 
(HTTP) use transport protocols to encapsulate their information and/or connec- 
tions. To enable similar applications to talk to one another, TCP/IP has what are 
called “well-known port numbers.” These ports are used as sub-addresses within 
packets to identify exactly which service or protocol a packet is destined for on a 
particular host. 

TCP/IP serves as a conduit to and from devices, enabling the sharing, moni- 
toring, or controlling those devices. A TCP/IP stack can have a tremendous effect 
on a device’s memory resources and CPU utilization. Interactions with other parts 
of the system may be highly undesirable and unpredictable. Problems in TCP/IP 
stacks can render a system inoperable. 


14.5 Transmission Control Protocol 

The TCP [31,32] is the connection-oriented transport layer protocol designed to 
operate on the top of the datagram network layer IP. The two widely used protocols 
are known under the collective name TCP/IP. TCP provides a reliable end-to-end 
byte stream transport. The segmentation and reassembly of the messages are handled 
by IP, not by TCP. 

TCP uses the selective repeat protocol (SRP) with positive acknowledgments 
and time-out. Each byte sent is numbered and must be acknowledged. A number 
of bytes can be sent in the same packet, and the acknowledgment (ACK) then 
indicates the sequence number of the next byte expected by the receiver. ACK 
carrying sequence number m provides acknowledgment for all packets up to, and 
including, packets with sequence number m — 1. If a packet is lost, the receiver 
sends duplicate ACK for a subsequent correctly received packet. 

The TCP header is at least 20 bytes, and has 16 error detection bits for the 
data and the header. The error detection bits are calculated by summing the 1's 
complements of the groups of 16 bits that make up the data and the header, and 
by taking the 1's complement of that sum. The number of data that can be sent 
before being acknowledged is the window size (Wmax) which can be adjusted by 
either the sender or the receiver to control the flow based on the available buffers 
and the congestion. Initial sequence numbers are negotiated by means of a three- 
way handshake at the outset of connection. Connections are released by means of 
a three-way handshake. 

TCP transmitter (Tx) uses an adaptive window based transmit strategy. Tx 
does not allow more than Wmax unacknowledged packets outstanding at any given 
time. With the congestion window lower limit at time t equal to X(t), packets up 
to X(t)—1 have been transmitted and acknowledged. Tx can send starting from 
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X(t). X(t) has a nondecreasing sample path. With congestion window width at 
time £ equal to W(t), this is the amount of packets Tx is allowed to send starting 
with X(t). W(t) can increase or decrease (because of window adaptation), but 
never exceed Wmax. Transitions in X(t) and W(t) are triggered by receipt of ACK. 
Receiver (Rx) of an ACK increases X(t) by an amount equal to the amount of data 
acknowledged. Changes in W(t), however, depend on the version of TCP and the 
congestion control process. 

Tx starts a timer each time a new packet is sent. If the timer reaches a 
round trip time-out (RTO) value before the packet is acknowledged, a time-out 
occurs. Retransmission is initiated on time-out. RTO value is derived from a 
round trip timer estimation procedure. RTO is sent only in multiples of a timer 
granularity. 

The window adaptation procedure is as follows: 


1. Slow start phase. At the beginning of the TCP connection, the sender 
enters the slow start phase, in which window size is increased by 1 maxi- 
mum segment size (MSS) for every ACK received; thus, the TCP sender 
window grows exponentially in round trip timer. 


If W< Wa, № < W + 1 for each ACK received; 
Wn is the slow-start threshold. 


2. Congestion avoidance phase. When the window size reaches Wu, the TCP 
sender enters the congestion avoidance phase. TCP uses a sliding window- 
based flow control mechanism allowing the sender to advance the transmission 
window linearly by one segment upon reception of an ACK, which indicates 
that the last in-order packet was received successfully by the receiver. 


If W W + 1/W for each ACK received 


3. Upon time-out. When packet loss occurs at a congested link due to buffer 
overflow at the intermediate router, either the sender receives duplicate 
ACKs, or the sender’s RTO timer expires. These events activate TCP’s 
fast retransmit and recovery, by which the sender reduces the size of the 
congestion window to half and linearly increases the congestion window 
as in the congestion avoidance phase, resulting in a lower transmission rate 
to relieve the link congestion. 


W + —1and Wy < №/2 


Assuming long running connections and large enough window sizes, the 
upper bound on throughput, R, of a TCP connection is given by: 


0.93MSS 
R= 14.1 
RTT Jp ы 
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where: 
MSS = maximum segment size 
RTT = average end-to-end round trip time of the TCP connection 
p = packet loss probability for the path. 


Equation 14.1 neglects retransmissions due to errors. If the error rate is more 
than 1%, these retransmissions have to be considered. This leads to the following 
formula: 


R= MSS (14.2) 
RTT/1.33p + КТО - p - (1 + 325?) - min(1, 3/0.75p) 


where: 
RTO = retransmission time-out ~ 5RTT 


For a given object, the latency is defined as the time from when the client 
initiates a TCP connection until the time at which the client receives the requested 
object in its entirety. Using the following assumptions, we provide expressions for 
latency with a static and dynamic congestion window. 


* The network is not congested. 


* The amount of data that can be transmitted is dependent on the sender’s 
congestion window size. 

* Packets are neither lost nor corrupted. 

* All protocol header overheads are negligible and ignored. 

* The object to be transferred consists of an integer number of segments of 
size MSS. 

* The only packets with non-negligible transmission times are packets that 
carry maximum-size TCP segments. Request messages, acknowledgments, 
and TCP connection establishment segments are small and have negligible 
transmission times. 

* The initial threshold in the TCP congestion-control mechanism is a large 
value that is never attained by the congestion window. 


Static Congestion Window 
L =2RTT + е + (К — 1)[S/R + RTT — (WS)/R]}* (14.3) 


where: 
L = latency of the connection 
{x}* = max(x, 0) 
K = O/(WS) round-up to the nearest integer 
W = congestion window size 
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O = Size of the object to be transmitted 

R = Transmission rate of the link from the server to the client 
Maximum Segment Size (MSS) = S 

RTT = round-trip time 


Dynamic Congestion Window 


= O S| 9р 4,5 
L=2RTT +Ê + P RIT +$ | 2-15 (14.4) 
where: 
P = min (Q, K — 1} 
in which 


О = log:[1 + RTT/(S/R)] + 1 


ISO defined five classes (0 to 4) of connection-oriented transport services (ISO 
8073). We briefly describe class 4, which transmits packets with error recovery and 
in the correct order. This protocol is known as Transport Protocol Class 4 (TP4) 
and is designed for unreliable networks. The basic steps in the TP4 connection are 
given below: 


e Connection establishment: This is performed by means of a three-way 
handshake to agree on connection parameters, such as a credit value that 
specifies how many packets can be sent initially until the next credit arrives, 
connection number, the transport source and destination access points, and 
a maximum time-out before ACK. 


e Data transfer: The data packets are numbered sequentially. This allows 
resequencing. ACKs may be done for blocks of packets. There is a provi- 
sion for expedited data transport in which the data packets are sent and 
acknowledged one at a time. Expedited packets jump to the head of the 
queues. Flow is controlled by windows or by credits. 


e Clear connection: Connections are released by an expedited packet indicating 
the connection termination. The buffers are then flushed out of the data packets 
corresponding to that connection. 


In practice, TCP has been tuned for a traditional network consisting of wired 
links and stationary hosts. TCP assumes that congestion in the network is the 
primary cause of packet losses and unusual delay. TCP performs well over wired 
networks by adapting to end-to-end delays and congestion losses. TCP reacts 
to packet losses by dropping its transmission (congestion) window size before 
retransmitting packets, initiating congestion control or avoidance mechanisms. 
These measures result in a reduction in the load on the intermediate links, thereby 
controlling the congestion in the network. While slow start is one of the most 
useful mechanisms in wireline networks, it significantly reduces the efficiency of 
TCP when used together with mobile receivers or senders. 
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Example 14.1 

We consider sending an object of size O = 800kilobytes from a server to a client. 
If maximum segment size (5) = 536 bytes and RTT = 100 msec, and the transport 
protocol uses a static window with window size W, determine the minimum pos- 
sible latency for a transmission rate of 1 Mbps. What is the minimum window size 
that achieves this latency? 


Solution 


e О _ 800 X 1000 _ 
Lmin = 2RTT + R 0.2 + ЕЗЕТ 1.0sec. 


For minimum latency 5 + RIT – X =0 


we RTT _ 100 х 1073 . = 
„М= 1+ s 1+ КЕЛЫП 1 + 23.3 = 24.3 segments 


R 106 


Example 14.2 


Find the upper bound of the throughput for a TP connection if RTT — 100 msec, 
maximum segment size (MSS) — 536 bytes, and packet loss probability for the 
path is 196. What is the throughput with retransmissions due to errors? 


Solution 


р = 0:93 X (536 x 8) 
0.100 x V0.01 


With retransmission due to error: 


— 0.3988 Mbps 


536 X 8 
R= = 0.3349 Mbps 
0.1V0.0133 + 0.5 х 0.01 x [1 + 32(0.01)2] min(1, 3V0.75 x 0.01) ш 


14.5.1 TCP Enhancements for Wireless Networks 

TCP was primarily designed for wired networks. Its parameters were selected 
to maximize its performance on wired networks where packet delays and losses 
are caused mainly by congestion. In wired networks, random bit error rate is 
negligible. In a wireless network, packet losses occur due to handoff or fading 
and can be random. When TCP responds to packet losses by invoking congestion 
control or an avoidance algorithm, a degraded end-to-end performance in wire- 
less network results. A wireless environment violates many of the assumptions 
made by TCP. Several approaches have been suggested to improve end-to-end 
TCP performance over wireless links [12-14]. They can be classified into three 
categories. 
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1. end-to-end TCP protocols, where loss recovery is performed by the sender, 
such as explicit loss notification (ELN) option 


2. link-layer protocols that provide local reliability using techniques such 
as forward error correction (FEC) and retransmission of lost packets in 
response to automatic repeat request (ARQ) messages 


3. split TCP connection protocol that breaks the end-to-end TCP connection 
into two parts at the base station, one between the sender and the base station, 
and the other between the base station and the receiver. 


All wireless networks face a high bit error rate. In heterogeneous networks, 
to explicitly differentiate the cause of packet loss is the primary goal of TCP 
design. Such efforts aim to find an explicit way to inform the sender of the cause 
of packet loss, be it congestion or random errors. Thus, the sender is able to make 
appropriate decisions on how to adjust the congestion window. 

In the end-to-end case, the link-layer ARQ mechanism is used to improve 
the error rate seen by TCP. The IS-95 CDMA data stack uses this approach. 
In the link-layer case, network layer software is modified at the base station to 
monitor every passing packet in either direction. Cache packets at the base station 
are used and local retransmissions across wireless links are performed. In the split, 
the TCP mode wireless portion is separated from the fixed portion. With split TCP, 
TCP may get ACK even before the packet is successfully delivered to the receiver. 
It also involves software overhead. Several schemes that have been used with the 
goal to improve TCP’s performance in wireless and mobile environment are: 


* Indirect TCP (I-TCP) (see Figure 14.10) 
* Snooping TCP (see Figure 14.11) 

* Mobile TCP (M-TCP) 

* Fast retransmit/fast recovery 


Base 
Sender ТСР #1 Station 
TCP #2 
Fixed Mobile 
Host host 
Router Antenna 
Land-based Network Air-based Network 


Figure 14.10 Split connection (indirect) TCP in wireless environment. 
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* Transmission/time-out freezing 


* Selective retransmission 
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Table 14.1 gives comparisons of these schemes. 
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Fixed 
Host 


TCP #1 


Router 
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TCP #2 


Antenna 
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Mobile 
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Note: Base station snoops and acts like TCP (generates ACKs, delete ACKs, resent segments) 


Figure 14.11 Snooping agent TCP in wireless environment. 


Table 14.1 Comparison of TCP enhancements for mobility. 


Approch 


I-TCP 


Snooping TCP 


M-TCP 


Fast retransmit/fast 
recovery 


Transmission/ 
time-out 
freezing 


Selective 
retransmission 


Mechanism 


Splits TCP 
connection into two 
connections 


Snoops data and 
ACKs, local retrans- 
mission 


Splits TCP 
connection, chokes 
sender via window 
size 


Avoids slow-start 
after roaming 


Freezes TCP state 
at disconnection, 
resumes after 
reconnecting 


Retransmits only 
lost data 


Advantages 


Isolation of wireless 
link, simple 


Transparent for 
end-to-end 
connection, MAC 
integration possible 


Maintains end-to- 
end semantics, 
handles longterm 
and frequent 
disconnections 


Simple and efficient 


Independent of 
content, works for 
longer interruptions 


Very efficient 


Disadvantages 


Loss of TCP 
semantics, higher 
latency at handoff 
security problem 


Insufficient 
isolation of wireless 
link, security problem 


Bad isolation of wire- 
less link, overhead 
due to bandwidth 
management, 
security problem 


Mixed layers, not 
transparent 


Changes in TCP 
required, MAC 
independent 


Slightly more 
complex receiver 
software, more buffer 
space required 
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The current TCP for 2.5G/3G wireless networks describes a profile to 
optimize TCP for wireless wide-area networks (WWANSs) such as GSM/GPRS, 
UMTS, or cdma2000. The following characteristics have been considered in 
deploying applications over 2.5/3G wireless links: 


* Data rates 
* Latency 

e Jitter 

e Packet loss 


Based on these characteristics, the following configuration parameters for 
TOP in a wireless environment have been suggested: 


e Large window size: TCP should use large enough window sizes based 
on the bandwidth delay experienced in wireless systems. A large initial 
window size (more than the typical 1 segment) of 2 to 4 segments may 
increase performance particularly for short transmissions (a few segments 
in total). 


Limit transmit: This is an extension of fast retransmission/fast recovery 
and is useful when small amounts of data are to be transmitted. 


Large maximum segment size: The larger the MSS the faster TCP increases 
the congestion window. Link-layers fragment packet data units (PDUs) for 
transmit according to their needs and a large MSS may be used to increase 
performance. MSS path discovery should be used for larger segment sizes 
instead of assuming the small default MSS. 


Selective ACK (SACK): SACK allows the selective retransmission of packets. 
It is beneficial compared to the standard cumulative scheme. 


Explicit congestion notification (ECN): ECN allows a receiver to inform a 
sender of congestion in the network by setting the ECN-echo flag on receiv- 
ing an IP packet that has experienced congestion. This scheme makes it 
easier to distinguish packet loss due to retransmission errors from packet 
loss due to congestion. 


Time-stamp: With the help of time-stamps, higher delay spikes can be tolerated 
by TCP without experiencing a spurious time-out. The effect of bandwidth 
oscillation is also reduced. 


No header compression: Header compression mechanism does not perform 
well in the presence of packet losses. It should not be used. 


14.5.2 Implementation of Wireless TCP 

Traditional TCP schemes suffer from severe performance degradation in a mixed 
wired and wireless environment. Modifications to standard TCP to remove its 
deficiency in wireless communications have been proposed. 
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Figure 14.12 End-to-end connection TCP in wireless environment. 


The design of wireless TCP should consider the characteristics of a particular 
type of wireless network and its need; for example, a satellite network has a long 
propagation delay, and an ad hoc network is infrastructureless. 

Wireless TCP algorithms can be designed in either split mode or end-to-end 
mode. The split mode divides the TCP connection into a wireless and wired portion, 
and ACKs are generated for both portions separately (see Figure 14.10). By doing 
so, the performance of the wired portion is not affected by the relatively unreli- 
able wireless portion. The end-to-end mode treats the route from the sender to 
the receiver as an end-to-end path, and the sender is acknowledged directly by the 
receiver (see Figure 14.12). This approach maintains the end-to-end semantics of the 
original TCP design. 

The split mode TCP attempts to shield the wireless portion from the fixed 
network by separating the flow control at the intermediate router (or a base 
station), so that the wireless behavior has the least impact on the fixed network. 
The intermediate router acts as a terminal in both the fixed and wireless portions. 
Both end hosts communicate with the intermediate router independently, without 
knowledge of the other end. The intermediate router is provided with functionality 
to coordinate the transaction between two network portions. In indirect TCP 
(I-TCP) the mobile support router (MSR) connects the mobile host to the fixed 
host and establishes two separate TCP connections with the fixed host and mobile 
host, respectively. The mobile support router communicates with the fixed host 
on behalf of the mobile host. The congestion window is maintained separately for 
wireless and fixed connections. When the mobile host switches cells, a new MSR 
takes over the communication with the fixed host seamlessly. Thus, the fixed host 
is protected from the unreliable feature of wireless connections. 

In split mode, an intermediate router has to reveal the information in the 
TCP packet and process related data before it reaches its destination. This violates 
the end-to-end semantics of the original TCP. In the end-to-end approach, only 
the end hosts participate in flow control. The receiver provides feedback reflecting 
the network condition, and the sender makes decisions for congestion control. 

In the end-to-end approach, the ability to accurately probe for the avail- 
able bandwidth is the key to better performance. The available bandwidth of a 
flow is the minimum unused link capacity of the flow’s fair share along the path. 
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The end-to-end approach can have its congestion control mechanism realized 
in two ways: reactive and proactive. By reactive congestion control, the sender 
rectifies the congestion window when the network situation becomes marginal 
or has crossed a threshold. By proactive congestion control, feedback from the 
network guides the sender to reallocate network resources in order to prevent 
congestion. 

In cellular networks, where the base station interconnects a fixed network 
and a mobile network, modifications of TCP algorithms focus on cellular charac- 
teristics such as handoff and high bit error rate. The end-to-end solution is used to 
improve TCP performance. It imposes no restrictions on routers and only requires 
code modifications at the mobile unit or receiver side. This approach addresses 
the throughput degradation caused by frequent disconnections (and reconnec- 
tions) due to mobile handoff or temporary blockage of radio signals by obstacles. 
The assumption is that the mobile has knowledge of radio signal strength, and 
therefore can predict the impending disconnections. In this approach, the receiver 
on the mobile proactive sets the window size to zero in the ACK packets in the 
presence of impending disconnections. The zero window size ACK packet forces 
the sender into persist mode, where it ceases to send more packets while keeping 
its sending window unchanged. To prevent the sender from exponentially back- 
ing off when it detects the reconnection, the receiver sends several positive ACK 
packets to the sender acknowledging the last received packet before disconnection 
so that the transfer can resume quickly at the rate before the disconnection occurs. 
To implement the scheme proposed in reference [11], cross-layer information is 
required to be exchanged, and the TCP layer protocol must be exposed to some 
details of roaming and handoff algorithms implemented by network interface 
card vendors on the interface devices. 


14.6 Mobile IP (MIP) and Session Initiation Protocol (SIP) 


Third-generation (3G) mobile networks are designed to provide a variety of IP data 
services such as voice over IP (VoIP) and instant messaging (IM). Both IPv4 and 
IPv6 are supported in order to provide future-proof solutions. Mobility is supported 
through both mobile-specific and IP mechanisms. Mobile IP is a key technology for 
managing mobility in wireless networks [21-25]. At the same time, the SIP is the 
key to realizing and provisioning services in IP-based mobile networks. The need for 
mobility of future real-time service independent of terminal mobility requires SIP to 
seamlessly interwork with MIP operations. 

3G networks introduced support of IP mobility through MIP. In particu- 
lar, the cdma2000 network specified by 3GPP2 deploys MIP to support terminal 
mobility between points of attachment to the network. MIP will also be supported 
in 3GPP networks. The SIP (defined by the IETF) is key to service provisioning 
in 3G networks beyond plain IP connectivity. 3GPP has defined and standardized 
a network infrastructure called the IP multimedia service (IMS) based on SIP for 
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supporting a multitude of services to 3G users. Examples are VoIP, instant mes- 
saging, and streaming. 

There are substantial differences between 3GPP and 3GPP2 packet core net- 
works that have an impact on how SIP services can be provided through an IP 
multimedia service. In particular, 3GPP2 networks use MIP to support terminal 
mobility. The adoption of SIP and MIP in 3G networks introduces the need for 
SIP and the IMS to interwork with MIP. 

In this section, we briefly introduce MIP and SIP and discuss the issues related 
to interworking between SIP and MIP, with a focus on IPv6 and the applicability 
to 3G networks. 


14.6.1 Mobile IP 

IP packets do not require mechanisms to set up a dedicated bandwidth or chan- 
nel. The IP address serves a dual purpose—for routing packets through the 
Internet and as an end-point identifier for applications in end-hosts. The connec- 
tions in an IP network use sockets to communicate between clients and servers. 
A socket consists of source IP address, source port, destination IP address, and 
destination port. A TCP connection cannot survive any address change because it 
relies on the socket to determine a connection. However, when a terminal moves 
from one network to another, its address changes. A mobile node (MN) is a 
terminal than can change its location and thus its point of attachment. The part- 
ner for communication is called the correspondent node that can be either a fixed 
or an MN. 

Mobile IP is designed to support host mobility on the Internet. In order for 
an MN to move across different connection points while maintaining connectivity 
with other nodes on the Internet, the MN needs to maintain the same address. Two 
versions of MIP are defined depending on IP version used in the network: MIPv4 
for IPv4 networks and MIPv6 for IPv6 networks. 

Mobile IP implies that a user is connected to one or more applications across 
the Internet, that the user's point of attachment changes dynamically, and that all 
connections are automatically maintained despite the change. When MN moves 
its attachment point to another network, it is considered a foreign network for 
this host. Once the mobile is reattached, it makes its presence known by register- 
ing with a network node, typically a router, on the foreign network known as a 
foreign agent (FA). The mobile then communicates with a similar agent on the 
user's home network, known as a home agent (HA), giving the home agent the 
care-of address (CoA) of the mobile node; the care-of address identifies the for- 
eign agent's location. A home agent tracks a mobile host's location. The mobile 
host is affiliated with a static IP address on the home network and a foreign 
agent supports mobility on a foreign network by providing routing to a visiting 
mobile host. Network supporting mobile IP will have to create foreign agents to 
deliver packets of information to the mobile host. Mobile IP is fundamental for 
the paradigm to provide the successful model for wireless data, which takes the 
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Figure 14.13 Mobile IP scenario. 


connection one has into the corporate intranet and makes it wireless. Figure 14.13 
shows an MIP scenario that includes the following steps: 


1. 


Server X transmits an IP datagram destined for mobile node A, with A’s home 
address in the IP header. The IP datagram is routed to A’s home network. 


. At the home network, the incoming IP datagram is intercepted by the home 


agent. The home agent encapsulates the entire datagram inside a new IP data- 
gram which has the A’s care-of address in the header, and retransmits the data- 
gram. The use of an outer IP datagram with a different destination IP address 
is known as tunneling. This IP datagram is routed to the foreign agent. 


. The foreign agent strips off the outer IP header, encapsulates the original 


IP datagram in a network-level packet data unit (PDU), and delivers the 
original datagram to A across the foreign network. 


. When A sends the IP datagram to X, it uses X’s IP address. This is a fixed address; 


that is, X is not a mobile node. Each IP datagram is sent by A to a router on the 
foreign network to X. Typically, this router is also the foreign agent. 

The IP datagram from A to X travels directly across the Internet to X, 
using X’s IP address. 


In MIPv4, MN registers with an FA that becomes the point of contact for 


the MN. Subsequently, the MN updates its HA, which is a router on the home 
network that forwards packets meant for the MN’s home address (HoA) to the 
MN’s current point of attachment (i.e., the CoA of the FA). This allows the MN 
to remain “always оп” —always reachable at its HoA. 
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MIPv6 also supports direct peer-to-peer communication, called route 
optimization, between the MN and its core networks without having to traverse 
the HA. In this way, the MN uses the HoA for communication with a core network 
(CN) and the CoA for routing purposes. Since MIP operates at the network layer, 
any change of CoA is transparent to the transport protocols and applications. 
Hence, all applications in the MN and CN can ignore the mobility of the MN and 
do not have to deal with a change of network attachment. 

MIPv4 has been a standard for some years; MIPv6 is currently becoming a 
standard. 


Mobile IP Capabilities 
Three basic capabilities of MIP are registration, discovery, and tunneling (see 
Figure 14.14). These are discussed in more detail in the following paragraphs. 


* Registration: A mobile node uses an authenticated registration procedure 
to inform its home agent of its care-of address. 


* Discovery: A mobile node uses a discovery procedure to identify a prospective 
home agent and foreign agent. 


* Tunneling: Tunneling is used to forward IP datagrams from a home address 
to a care-of address. 


The discovery process in MIP is similar to the router advertisement process 
defined in ICMP. The agent discovery makes use of ICMP router advertisement 
messages, with one or more extensions specific to MIP. A mobile node is respon- 
sible for an ongoing discovery process to determine if it is attached to its network 
(in which case a datagram may be received without forwarding) or to a foreign 
network. A transition from the home network to a foreign network can occur 
at any time without notification to the network layer (i.e., the IP layer). The dis- 
covery for a mobile node is a continuous process. Figure 14.15 shows the flow 
diagram for the agent discovery procedure. 

Location management in MIP is achieved via a registration process and an 
agent advertisement. FAs and HAs periodically advertise their presence using 
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Figure 14.14 Mobile IP capabilities. 
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Figure 14.15 Agent discovery procedure. 


agent advertisement messages. The same agent may act as both an HA and an 
FA — mobility extensions to ICMP messages which are used for agent advertise- 
ments. The messages contain information about the CoA associated with the FA, 
whether the agent is busy, whether minimal encapsulation is permitted, whether 
registration is mandatory, and so on. The agent advertisement packet is a broad- 
cast message on the link. If the mobile node gets an advertisement from its HA, it 
must deregister its CoA and enable a gratuitous ARP. If a mobile node does not 
hear any advertisement, it must solicit an agent advertisement using ICMP. 

Once an agent is discovered, the MN performs either registration or dereg- 
istration with the HA, depending on whether the discovered agent is an HA or 
an FA. The MN sends a registration request using UDP to HA through the FA 
(or directly, if it is a co-located CoA). The HA creates a mobility binding between 
the MN's home address and the current CoA that has a fixed lifetime. The mobile 
node should register before expiration of the binding. A registration reply indicates 
whether the registration is successful. A rejection is possible by either the HA or 
FA for such reasons as insufficient resources, the home agent is unreachable, there 
are too many simultaneous bindings, failed authentication, and so on. 

Each FA maintains a list of visiting mobiles containing the following 
information: 


* Link-layer address of the mobile node 
* Mobile node home IP address 
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UDP registration request source port 
* Home agent IP address 
* An identification field 


Registration lifetime 


Remaining lifetime of pending or current registration 


IP Tunneling. Tunneling is used to forward IP datagrams from a home address to 
a care-of-address. Types of IP tunneling are: 


* [P-within-IP encapsulation— simplest approach, defined in RFC 2003 
* Minimal encapsulation — involves fewer fields, defined in RFC 2004 


* Generic routing encapsulation (СКЕ) — procedure developed prior to mobile 
IP, defined in RFC 1701 


IP-within-IP encapsulation (see Figure 14.16): The entire IP datagram 
becomes the payload in a new IP datagram. The inner, original IP header is 
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Figure 14.16 IP-within-IP encapsulation. 
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unchanged except to decrement time-to-live (TTL) by 1. The outer header is a full 
IP header in which: 


* Two fields, version number and type of service, are copied from an inner header 


* The source address typically is the IP address of the home agent, and the 
destination address is the CoA for the intended destination 


Minimal encapsulation (see Figure 14.17): This results in less overhead and 
can be used if the mobile node, home agent, and foreign agent all agree to do so. 
A new header with the following fields is used between the original IP header and 
the original IP payload: 


* Protocol 


Header checksum 


Original destination address 


Original source address 


The following fields in the original IP header are modified to form the new 
outer IP header: 


* Total length 
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Figure 14.17 Minimal encapsulation. 
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• Header checksum 
* Source address 
* Destination address 


The encapsulation (home agent) prepares the encapsulated datagram which 
is now suitable for tunneling and delivery across the Internet to the care-of address. 
The fields in the minimal forwarding header are restored to the original IP header 
and the forwarding header is removed from the datagram. The total length field 
in the IP header is decremented by the size of the minimal forwarding header and 
the checksum field is recomputed. 


14.6.2 Session Initiation Protocol (SIP) 

SIP is used for provisioning services in IP-based mobile networks. SIP specifica- 
tions define an architecture of user agents and servers (proxy server, redirect server, 
register) that support communications between SIP peers through user tracking, 
call routing, and so on. In SIP, each user is uniquely identified by an SIP universal 
resource indicator, which is used as the identifier to address the called user when 
the sending session initiation requests. However, an IP address is associated with 
the user in order to route SIP signaling from the SIP register. A SIP user registers 
with the SIP register to indicate its presence in the network and its willingness to 
receive incoming session initiation requests from other users. 

A typical session in SIP begins with a user sending an INVITE message to a 
peer through SIP proxies. When the recipient accepts the request and the initia- 
tor is notified, the actual data flow begins, usually taking a path other than the 
one taken by the SIP signaling messages. An INVITE message typically carries 
a description of the session parameters. In particular, each media component of 
the SIP session is described in terms of QoS parameters. The user can modify the 
parameters regarding an existing session by adding or removing media compo- 
nents or modifying the current QoS using a re-INVITE message. SIP also supports 
personal mobility by allowing a user to reregister with an SIP register on changing 
its point of attachment to the network, in particular on changing its IP address. 
A user could also change point of attachment during an active session provided 
the user reinvites the session providing the new parameters. 


14.7 Internet Reference Model 

Although many useful protocols have been developed in the context of OSI, the 
overall 7-layer model has not flourished. The TCP/IP architecture has come to 
dominate. There are a number of reasons for this outcome. The most important is 
that the key TCP/IP protocols were mature and well tested at a time when similar 
OSI protocols were in the development stage. When businesses began to recog- 
nize the need for interoperability across networks, only TCP/IP was available and 
ready to go. Another reason is that the OSI model is unnecessarily complex, with 
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Figure 14.18 Internet reference model. 


seven layers to accomplish what TCP/IP does with four layers. The Internet refer- 
ence model based on TCP/IP is shown in Figure 14.18. The model includes: 


* The application layer that covers OSI application and presentation layers. 
Some of the application layer protocols are HTTP, FTP, SMTP, post office 
protocol (POP), etc. 


* The transport (end-to-end) layer includes OSI transport and session layers. 
The end-to-end protocols are TCP and UDP. 


* The network (Internet) layer corresponds to the upper part of the OSI network 
layer. The protocol is IP. 


* The link (subnets) layer includes the lower part of the OSI network layer, 
link layer, and physical layer. 


14.8 Summary 


In this chapter, we first presented the workings of the Internet and discussed the 
addressing scheme used in the Internet. We then discussed IP, TCP, and mobile IP 
(MIP); presented the IP suite and compared it with the OSI model. We also discussed 
TCP in a wireless environment. 


Problems 
14.1 Which two addresses are used in an IP address? 


14.2 What are the maximum number of class А, B, and C network IDs? 
14.3 Describe four layers of the TCP/IP protocol suite. 

14.4 Describe the characteristics of IP in the TCP/IP protocol suite. 

14.5 What is the ICMP and what is its role in the TCP/IP protocol suite? 
14.6 Describe the IGMP in the TCP/IP protocol suite. 
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14.7 What are the ARP and RARP in the TCP/IP protocol suite? 
14.8 What are the roles of the TCP and UDP in the TCP/IP protocol suite? 


14.9 Discuss split-connection and end-to-end implementation in TCP for a 


14 
14 
14 


wireless environment. 


.10 Discuss IntServ and DiffServ in the Internet. 
.11 Define MIP in the Internet. 


-12 An object of size (O) 1200kilobytes is transmitted from a server to a 


client. The maximum segment size (S) is 600 bytes. The round trip time 
(RTT) is 120msec. If the transport protocol uses a static window with 
window size W, what is the maximum possible latency for a transmis- 
sion rate, R, of 2 Mbps? How many segments are required to achieve this 
latency? 
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CHAPTER 15 


Wide-Area Wireless Networks 
(WANs) —GSM Evolution 


15.1 Introduction 

Third-generation (3G) wireless systems [2,3,9] offer access to services anywhere 
from a single terminal; the old boundaries between telephony, information, and 
entertainment services are disappearing. Mobility is built into many of the services 
currently considered as fixed, especially in such areas as high speed access to the 
Internet, entertainment, information, and electronic commerce (e-commerce) ser- 
vices. The distinction between the range of services offered via wireline or wireless is 
becoming less and less clear and, as the evolution toward 3G mobile services speeds 
up, these distinctions will disappear in the first decade of the new millennium. 

Applications for a 3G wireless network range from simple voice-only com- 
munications to simultaneous video, data, voice, and other multimedia applica- 
tions. One of the main benefits of 3G is that it allows a broad range of wireless 
services to be provided efficiently to many different users. 

Packet-based Internet Protocol (IP) technology is at the core of the 3G ser- 
vices. Users have continuous access to on-line information. E-mail messages arrive 
at hand-held terminals nearly instantaneously and business users are able to stay 
permanently connected to the company intranet. Wireless users are able to make 
video conference calls to the office and surf the Internet simultaneously, or play 
computer games interactively with friends in other locations. Figure 15.1 shows 
the data rate requirement for various services. 

In 1997, the TIA/EIA IS-136 community through the Universal Wireless Con- 
sortium (UWC) and the Telecommunications Industry Association (TIA) TR 45.3 
adopted a three-part strategy for evolving its 15-136 TDMA-based networks to 
3G wireless networks to satisfy International Mobile Telephony-2000 (IMT-2000) 
requirements. The strategy consists of: 


e Enhancing the voice and data capabilities of the existing 30 kHz carrier 
(IS-136 +) 


* Adding a 200kHz carrier for high-speed data (384kbps) in high mobility 
applications 


* Introducing a 1.6 MHz carrier for very high-speed data (2 Mbps) in low-mobility 
applications 
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Figure 15.1 User data requirements. 


The highlight of UWC strategy was the global convergence of IS-136 time 
division multiple access (TDMA) with a global system for mobile communica- 
tions (GSM) through the evolution of the 200 kHz GSM carrier for supporting 
high-speed data applications (384 kbps) while also improving a 30 kHz carrier for 
voice and mid-speed data applications. 

In this chapter we focus first on GSM evolution to packet data services and 
present the details of the general packet radio service (GPRS) and the enhanced 
data for GSM evolution (EDGE) service. We then provide details of 3G systems 
including wideband code division multiple access (CDMA) (WCDMA) (i.e., uni- 
versal mobile telecommunications services (UMTS)). We conclude the chapter by 
outlining the details of high-speed downlink packet access (HSDPA). 


15.2 GSM Evolution for Data 

From a radio access perspective, adding 3G capabilities to 2G systems mainly 
means supporting higher data rates. Possible scenarios depend on spectrum avail- 
ability for the network service provider. Depending on the spectrum situation, 
two different migration paths can be supported: 


* Reframing of existing spectrum bands 
* New or modified spectrum bands 


Two 3G radio access schemes are identified to support the different spectrum 
Scenarios: 


1. Enhanced data rates for GSM evolution (EDGE) with high-level modulation in 
a 200kHz TDMA channel is based on plug-in transceiver equipment, thereby 
allowing the migration of existing bands in small spectrum segments. 

2. Universal mobile telecommunications services (UMTS) is a new radio 
access network based on 5 MHz WCDMA and optimized for efficient sup- 
port of 3G services. UMTS can be used in both new and existing spectra. 
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From a network point of view, 3G capabilities implies the addition of packet 
switched (PS) services, Internet access, and IP connectivity. With this approach, 
the existing mobile networks reuse the elements of mobility support, user authen- 
tication/service handling, and circuit switched (CS) services. With packet switched 
services, IP connectivity can then be added to provide a mobile multimedia core 
network by evolving the existing mobile network. 

GSM is moving to develop enhanced cutting-edge, customer-focused solu- 
tions to meet the challenges of the new millennium and 3G mobile services [29]. 
When GSM was first introduced, no one could have predicted the dramatic growth 
of the Internet and the rising demand for multimedia services. These developments 
have brought about new challenges to the world of GSM. For GSM operators, the 
emphasis is now rapidly changing from that of instigating and driving the devel- 
opment of technology to fundamentally enabling mobile data transmission to that 
of improving speed, quality, simplicity, coverage, and reliability in terms of tools 
and services that will boost mass market take-up. 

Users are increasingly looking to gain access to information and services 
wherever they are and whenever they want. GSM should provide that connectivity. 
Internet access, web browsing and the whole range of mobile multimedia capability 
are the major drivers for development of higher data speed technologies. 

Current data traffic on most GSM networks is modest, less than 5% of total 
GSM traffic. But with the new initiatives coming to fruition during the course of 
the next two to three years, exponential growth in data traffic is forecast. The 
use of messaging-based applications may reach up to about 90% by the year 
2008. GSM data transmission using high-speed circuit switched data (HSCSD) 
and GPRS may reach a penetration of about 80% by 2008 [1]. 

GSM operators have two nonexclusive options for evolving their networks 
to 3G wideband multimedia operation: (1) using GPRS and EDGE in the exist- 
ing radio spectrum, and in small amounts of the new spectrum; or (2) using 
WCDMA in the new 2 GHz bands, or in large amounts of the existing spectrum. 
Both approaches offer a high degree of investment flexibility because roll-out can 
proceed in line with market demand with the extensive reuse of existing network 
equipment and radio sites. 

In the new 2 GHz bands, 3G capabilities are delivered using a new wide- 
band radio interface that offers much higher user data rates than are available 
today —384 kbps in the wide area and up to 2 Mbps in the local area. Of equal 
importance for such services is the high-speed packet switching provided by GPRS 
and its connection to public and private IP networks. 

GSM and digital (D)AMPS (15-136) operators can use existing radio bands 
to deliver some of the 3G services, even without the new wideband spectrum 
by evolving current networks and deploying GPRS and EDGE technologies. 
In the early years of 3G service deployment, a large proportion of wireless traffic 
will still be voice-only and low-rate data. So whatever the ultimate capabilities 
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of 3G networks, efficient and profitable ways of delivering more basic wireless 
services are still needed. 

The significance of EDGE for today's GSM operators is that it increases data 
rates up to 384 kbps and potentially even higher in a good quality radio environ- 
ment using current GSM spectrum and carrier structures more efficiently. EDGE 
is both a complement and an alternative to new WCDMA coverage. EDGE also 
has the effect of unifying the GSM, D-AMPS and WCDMA services through the 


use of dual-mode terminals. 


15.2.1 High Speed Circuit Switched Data 

High-speed circuit switched data (HSCSD) [1,4,5] is a feature that enables the 
co-allocation of multiple full rate traffic channels (TCH/F) of GSM into an HSCSD 
configuration. The aim of HSCSD is to provide a mixture of services with different 
air interface user rates by a single physical layer structure. The available capacity 
of an HSCSD configuration is several times the capacity of a TCH/F, leading to a 
significant enhancement in air interface data transfer capability. 

Ushering faster data rates into the mainstream is the new speed of 
14.4 kbps per time slot and HSCSD protocols that approach wireline access 
rates of up to 57.6 kbps by using multiple 14.4 kbps time slots. The increase 
from the current baseline of 9.6 kbps to 14.4 kbps is due to a nominal reduc- 
tion in the error-correction overhead of the GSM radio link protocol (RLP), 
allowing the use of a higher data rate. 

For operators, migration to HSCSD brings data into the mainstream, enabled 
in many cases by relatively standard software upgrades to base station (BS) and 
mobile switching center (MSC) equipment. Flexible air interface resource alloca- 
tion allows the network to dynamically assign resources related to the air inter- 
face usage according to the network operator's strategy, and the end-user's request 
for a change in the air interface resource allocation based on data transfer needs. 
The provision of the asymmetric air interface connection allows simple mobile 
equipment to receive data at higher rates than otherwise would be possible with 
a symmetric connection. 

For end-users, HSCSD enables the roll-out of mainstream high-end segment 
services that enable faster web browsing, file downloads, mobile video-conference 
and navigation, vertical applications, telematics, and bandwidth-secure mobile 
local area network (LAN) access. Value-added service providers will also be able 
to offer guaranteed quality of service and cost-efficient mass-market applications, 
such as direct IP where users make circuit-switched data calls straight into a GSM 
network router connected to the Internet. To the end-user, the value-added service 
provider or the operator is equivalent to an Internet service provider that offers a 
fast, secure dial-up Internet protocol service at cheaper mobile-to-mobile rates. 

HSCSD is provided within the existing mobility management. Roaming is 
also possible. The throughput for an HSCSD connection remains constant for the 
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duration of the call, except for interruption of transmission during handoff. The 
handoff is simultaneous for all time slots making up an HSCSD connection. End- 
users wanting to use HSCSD have to subscribe to general bearer services. Supple- 
mentary services applicable to general bearer services can be used simultaneously 
with HSCSD. 

Firmware on most current GSM PC cards needs to be upgraded. The reduced 
RLP layer also means that a stronger signal strength is necessary. Multiple time 
slot usage is probably only efficiently available in off-peak times, increasing over- 
all off-peak idle capacity usage. HSCSD is not a very feasible solution for bursty 
data applications. 


15.2.2 General Packet Radio Service 

The general packet radio service (GPRS) [6,7] enhances GSM data services 
significantly by providing end-to-end packet switched data connections. This is 
particularly efficient in Internet/intranet traffic, where short bursts of intense data 
communications are actively interspersed with relatively long periods of inactiv- 
ity. Because there is no real end-to-end connection to be established, setting up a 
GPRS call is almost instantaneous and users can be continuously on-line. Users 
have the additional benefits of paying for the actual data transmitted, rather than 
for connection time. Because GPRS does not require any dedicated end-to-end 
connection, it only uses network resources and bandwidth when data is actually 
being transmitted. This means that a given amount of radio bandwidth can be 
shared efficiently among many users simultaneously. 

The next phase in the high-speed road map is the evolution of current short 
message service (SMS), such as smart messaging and unstructured supplementary 
service data (USSD), toward the new GPRS, a packet data service using TCP/IP 
and X.25 to offer speeds up to 115kbps. GPRS has been standardized to opti- 
mally support a wide range of applications ranging from very frequent transmis- 
sions of medium to large data volume. Services of GPRS have been developed to 
reduce connection set-up time and allow an optimum usage of radio resources. 
GPRS provides a packet data service for GSM where time slots on the air interface 
can be assigned to GPRS over which packet data from several mobile stations is 
multiplexed. 

A similar evolution strategy, also adopting GPRS, has been developed for 
DAMPS (IS-136). For operators planning to offer wideband multimedia services, 
the move to GPRS packet-based data bearer service is significant; it is a relatively 
small step compared to building a totally new 3G IMT-2000 network. Use of the 
GPRS network architecture for IS-136+ packet data service enables data sub- 
scription roaming with GSM networks around the globe that support GPRS and 
its evolution. The IS-136+ packet data service standard is known as GPRS-136. 
GPRS-136 provides the same capabilities as GSM GPRS. The user can access 
either X.25 or an IP-based data network. 
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GPRS provides a core network platform for current GSM operators not 
only to expand the wireless data market in preparation for the introduction of 
3G services, but also a platform on which to build IMT-2000 frequencies should 
they acquire them. 

The implementation of GPRS has a limited impact on the GSM core net- 
work. It simply requires the addition of new packet data switching and gateway 
nodes, and an upgrade to existing nodes to provide a routing path for packet 
data between the wireless terminal and a gateway node. The gateway node pro- 
vides interworking with external packet data networks for access to the Internet, 
intranet, and databases. 

A GPRS architecture for GSM is shown in Figure 15.2 and network element 
interfaces in Figure 15.3. GPRS supports all widely used data communications 
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Figure 15.2 A GPRS architecture in GSM. 
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Figure 15.3 GPRS interfaces for different network elements. 


protocols, including IP, so it is possible to connect with any data source from 
anywhere in the world using a GPRS mobile terminal. GPRS supports applications 
ranging from low-speed short messages to high-speed corporate LAN communica- 
tions. However, one of the key benefits of GPRS — that it is connected through the 
existing GSM air interface modulation scheme — is also a limitation, restricting its 
potential for delivering higher data rates than 115 kbps. To build even higher rate 
data capabilities into GSM, a new modulation scheme is needed. 

GPRS can be implemented in the existing GSM systems. Changes are required 
in an existing GSM network to introduce GPRS. The base station subsystem (BSS) 
consists of a base station controller (BSC) and packet control unit (PCU). The 
PCU supports all GPRS protocols for communication over the air interface. Its 
function is to set up, supervise, and disconnect packet switched calls. The packet 
control unit supports cell change, radio resource configuration, and channel 
assignment. The base station transceiver (BTS) is a relay station without protocol 
functions. It performs modulation and demodulation. 
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The GPRS standard introduces two new nodes, the serving GPRS support 
node (SGSN) and the gateway GPRS support node (GGSN). The home location 
register (HLR) is enhanced with GPRS subscriber data and routing information. 
Two types of services are provided by GPRS: 


* Point-to-point (PTP) 
* Point-to-multipoint (PTM) 


Independent packet routing and transfer within the public land mobile net- 
work (PLMN) is supported by a new logical network node called the GPRS sup- 
port node (GSN). The GGSN acts as a logical interface to external packet data 
networks. Within the GPRS networks, protocol data units (PDUs) are encapsulated 
at the originating GSN and decapsulated at the destination GSN. In between the 
GSNs, IP is used as the backbone to transfer PDUs. This whole process is referred 
to as tunnelling in GPRS. The GGSN also maintains routing information used to 
tunnel the PDUs to the SGSN that is currently serving the mobile station (MS). 
All GPRS user related data required by the SGSN to perform the routing and data 
transfer functionality is stored within the HLR. In GPRS, a user may have multiple 
data sessions in operation at one time. These sessions are called packet data proto- 
col (PDP) contexts. The number of PDP contexts that are open for a user is only 
limited by the user's subscription and any operational constraints of the network. 

The main goal of the GPRS-136 architecture is to integrate IS-136 and GSM 
GPRS as much as possible with minimum changes to both technologies. In order 
to provide subscription roaming between GPRS-136 and GSM GPRS networks, 
a separate functional GSM GPRS HLR is incorporated into the architecture in 
addition to the IS-41 HLR. 

The European Telecommunication Standards Institute (ETSI) has specified 
GPRS as an overlay to the existing GSM network to provide packet data services. 
In order to operate a GPRS over a GSM network, new functionality has been intro- 
duced into existing GSM network elements (NEs) and new NEs are integrated into 
the existing service provider’s GSM network. 

The BSS of GSM is upgraded to support GPRS over the air interface. The BSS 
works with the GPRS backbone system (GBS) to provide GPRS service in a simi- 
lar manner to its interaction with the switching subsystem for the circuit-switched 
services. The GBS manages the GPRS sessions set up between the mobile terminal 
and the network by providing functions such as admission control, mobility man- 
agement (MM), and service management (SM). Subscriber and equipment infor- 
mation is shared between GPRS and the switched functions of GSM by the use 
of a common HLR and coordination of data between the visitor location register 
(VLR) and the GPRS support nodes of the GBS. The GBS is composed of two new 
NEs—the SGSN and the GGSN. 

The SGSN serves the mobile and performs security and access control func- 
tions. The SGSN is connected to the BSS via frame-relay. The SGSN provides 
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packet routing, mobility management, authentication, and ciphering to and from 
all GPRS subscribers located in the SGSN service area. A GPRS subscriber may 
be served by any SGSN in the network, depending on location. The traffic is 
routed from the SGSN to the BSC and to the mobile terminal via a BTS. At GPRS 
attach, the SGSN establishes a mobility management context containing infor- 
mation about mobility and security for the mobile. At PDP context activation, 
the SGSN establishes a PDP context which is used for routing purposes with the 
GGSN that the GPRS subscriber uses. The SGSN may send in some cases location 
information to the MSC/VLR and receive paging requests. 

The GGSN provides the gateway to the external IP network, handling secu- 
rity and accounting functions as well as the dynamic allocation of IP addresses. 
The GGSN contains routing information for the attached GPRS users. The rout- 
ing information is used to tunnel PDUs to the mobile’s current point of attach- 
ment, SGSN. The GGSN may be connected with the HLR via optional interface 
Ge. The GGSN is the first point of public data network (PDN) interconnection 
with a GSM PLMN supporting GPRS. From the external IP network’s point of 
view, the GGSN is a host that owns all IP addresses of all subscribers served by 
the GPRS network. 

The PTM-SC handles PTM traffic between the GPRS backbone and the HLR. 
The nodes are connected by an IP backbone network. The SGSN and GGSN func- 
tions may be combined in the same physical node or separated —even residing in 
different mobile networks. 

A special interface (G,) is provided between MSC/VLR and SGSN to coor- 
dinate signaling for mobile terminals that can handle both circuit-switched and 
packet-switched data. 

The HLR contains GPRS subscription data and routing information, and 
can be accessible from the SGSN. For the roaming mobiles, the HLR may reside 
in a different PLMN than the current SGSN. The HLR also maps each subscriber 
to one or more GGSNs. 

The objective of the GPRS design is to maximize the use of existing GSM infra- 
structure while minimizing the changes required within GSM. The GSN contains 
most of the necessary capabilities to support packet transmission over GSM. The crit- 
ical part in the GPRS network is the mobile to GSN (MS-SGSN) link which includes 
the MS-BTS, BTS-BSC, BSC-SGSN, and the SGSN-GGSN link. In particular, the Um 
interface including the radio channel is the bottleneck of the GPRS network due to 
the spectrum and channel speed/quality limitations. Since multiple traffic types of 
varying priorities are supported by the GPRS network, the quality of service criteria 
as well as resource management is required for performance evaluation. 

The BSC will require new capabilities for controlling the packet channels, 
new hardware in the form of a packet control unit, and new software for GPRS 
mobility management and paging. The BSC also has a new traffic and signaling 
interface from the SGSN. 
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The BTS has new protocols supporting packet data for the air interface, 
together with new slot and channel resource allocation functions. The utilization 
of resources is optimized through dynamic sharing between the two traffic types 
handled by the BSC. 


MS-SGSN Link 

The logical link control (LLC) layer (see Figure 15.4) is responsible for provid- 
ing a link between the MS and the SGSN. It governs the transport of GPRS sig- 
naling and traffic information from the MS to the SGSN. GPRS supports three 
service access points (SAPs) entities: the layer 3 management, subnet dependent 
convergence, and short message service (SMS). On the MS-BSS link, the radio 
link control (RLC), the medium access control (MAC), and GSM RF protocols 
are supported. 

The main drawback in implementing GPRS on an existing GSM infrastruc- 
ture is that the GSM network is optimized for voice transmission (i.e., the GSM 
channel quality is designed for voice which can tolerate errors at a predefined 
level). It is therefore expected that GPRS could have varied transmission perfor- 
mance in a different network or coverage area. To overcome this problem, GPRS 
supports multiple coding rates at the physical layer. 

A GPRS could share radio resources with GSM circuit switched (CS) service. 
This is governed by a dynamic resource sharing based on the capacity of demand 
criteria. A GPRS channel is allocated only if an active GPRS terminal exists in the 
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Figure 15.4 Protocol stack in GPRS. 
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network. Once resources are allocated to GPRS, at least one channel will serve as 
the master channel to carry all necessary signaling and control information for the 
operation of the GPRS. All other channels will serve as slave and are only used 
to carry user and signaling information. If no master channel exists, all the GPRS 
users will use the GSM common control channel (CCCH) and inform the network 
to allocate GPRS resources. 

A physical channel dedicated to GPRS is called a packet data channel 
(PDCH). It is mapped into one of the physical channels allocated to GPRS (see 
Figure 15.5). A PDCH can either be used as a packet common control channel 
(PCCCH), a packet broadcast control channel (PBCCH), or a packet traffic 
channel (PTCH). 
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Figure 15.5 GPRS logical channels. 
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The PCCCH consists of: 


e Packet random access channel (PRACH)—uplink 
* Packet access grant channel (PAGCH)—downlink 
e Packet notification channel (PNCH)—downlink 


On the other hand, the PTCH can either be: 


e Packet data traffic channel (PDTCH) 
* Packet associated control channel (PACCH) 


The arrangement of GPRS logical channels for given traffic characteristics 
also requires the combination of PCCCHs and PTCHs. Fundamental questions 
such as how many PDTCHs can be supported by a single PCCCH is needed in 
dimensioning GPRS. 


RLC/MAC Layer 

The multiframe structure of the PDCH in which GPRS RLC messages are trans- 
mitted is composed of 52 TDMA frames organized into RLC blocks of four bursts 
resulting in 12 blocks per multiframe plus four idle frames located in the 13th, 
26th, 39th, and 52nd positions (see Figure 15.6). 

Bo consists of frames 1, 2, 3 and 4, B4 consists of frames 5, 6, 7, and 8 and 
so on. It is important that the mapping of logical channels onto the radio blocks 
is done by means of an ordered set of blocks (Bo, Вс, Bo, В, B7, B4, Bio, B2, Вз, 
Bs, B11). The advantage of ordering the blocks is mainly to spread the locations 
of the control channels in each time slot reducing the average waiting time for the 
users to transmit signaling packets. It also provides an interleaving of the GPRS 
multiframe. 

GPRS uses a reservation protocol at the MAC layer. Users that have pack- 
ets ready to send request a channel via the PRACHs. The random access burst 
consists of only one TDMA frame with duration enough to transmit an 11-bit 
signaling message. Only the PDCHs carrying PCCCHs contain PRACHs. The 
blocks used as PRACHs are indicated by an uplink state flag (USF = free) by the 
downlink pair channel. 
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Figure 15.6 Idle frame location in GPRS multiframe. 
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Alternatively, the first K blocks following the ordered set of blocks can be 
assigned to PRACH permanently. The access burst is transmitted in one of the 
four bursts assigned as PRACH. Any packet channel request is returned by a 
packet immediate assignment on the PRACHs whose locations are broadcast by 
PBCCH. Optionally, a packet resource request for additional channels is initiated 
and returned by a packet resource assignment. The persistence of random access is 
maintained by the traffic load and user class with a back-off algorithm for unsuc- 
cessful attempts. In the channel assignment, one or more PTCHs (time slot) will 
be allocated to a particular user. A user reserves a specific number of blocks on the 
assigned PTCH as indicated by the USF. It is possible to accommodate more than 
one user per PTCH. User signaling is also transmitted on the same PTCH using 
the PAGCH whose usage depends on the necessity of the user. 

The performance of the MAC layer depends on the logical arrangement of 
the GPRS channels (i.e., allocation of random access channels, access grant chan- 
nels, broadcast channels, etc.) for given traffic statistics. This is determined by the 
amount of resources allocated for control and signaling compared to data traffic. 
A degree of flexibility of logical channels is also achieved as the traffic varies. The 
arrangement of logical channels is determined through the PBCCH. 


LLC Layer 

The LLC layer is responsible for providing a reliable link between the mobile 
and the SGSN. It is based on the LAPD (link access protocol D) protocol. It is 
designed to support variable length transmission in a PTP or PTM topology. It 
includes the layer function such as sequence control, flow control, error detec- 
tion, ciphering, and recovery as well as the provision of one or more logical 
link connections between two layer 3 entities. A logical link is identified by a 
DLCI (data link control identity) which consists of a service access point identity 
(SAPI) and terminal equipment identity (TEI) mapped on the LLC frame format. 
Depending on the status of the logical link, it supports an unacknowledged or 
an acknowledged information transfer. The former does not support error recov- 
ery mechanisms. The acknowledged information transfer supports error and flow 
control. This operation only applies to point-to-point operations. The LLC frame 
consists of an address field (1 or 5 octets), control field (2 or 6 octets), a length 
indicator field (2 octets maximum), information fields (1500 octets maximum), 
and a frame check sequence of 3 octets. Four types of control field formats are 
allowed including the supervisory functions (S format), the control functions (U), 
and acknowledged and unacknowledged information transfer (I and UI). 

In the performance evaluation, the objective is to determine delay during 
the exchange of commands and responses involved in various operations sup- 
ported by the LLC in relation to the transfer of an LLC PDU. The LLC commands 
and responses are exchanged between two layer 3 entities in conjunction with a 
service primitive invoked by the mobile or the SGSN. 
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Data Packet Routing in the GPRS Network 

The following discusses data packet routing for the mobile originated and mobile 
terminated data call scenarios. In mobile originated data routing, the mobile gets 
an IP packet from an application and requests a channel reservation. The mobile 
transmits data in the reserved time slots. The packet switched public data net- 
work (PSPDN) PDU is encapsulated into a sub-network dependent convergence 
protocol (SNDCP) unit that is sent via LLC protocol over the air interface to the 
SGSN currently serving the mobile (see Figure 15.7). 

For mobile terminated data routing (see Figure 15.7), we have two cases: 
routing to the home GPRS network, and routing to a visited GPRS network. In 
the first case, a user sends a data packet to a mobile. The packet goes through the 
local area network (LAN) via a router out on the GPRS context for the mobile. If 
the mobile is in a GPRS idle state, the packet is rejected. If the mobile is in standby 
or active mode, the GGSN routes the packet in an encapsulated format to SGSN. 

In the second case, the home GPRS network sends the data packet over 
the inter-operator backbone network to the visiting GPRS network. The visiting 
GPRS network routes the packet to the appropriate SGSN. 

The PTP and PTM applications of GPRS are listed below: 


* Point-to-point 
* Messaging (e.g., e-mail) 


* Remote access to corporate networks 


(b) 


(a) Visited GPRS Network 


GPRS Mobile GPRS 


Mobile 


= 


Intra-operator 
Backbone Network 


Host | Router 


(a) Mobile Originated Data Call Routing 
(b) Mobile Terminated Data Call Routing to Visited 
GPRS Network 


Figure 15.7 Data call routing in GPRS network. 
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* Access to the Internet 
* Credit card validation (point-of-sales) 
* Utility meter readings 
* Road toll applications 


* Automatic train control 


* Point-to-multipoint 
e PTM-multicast (send to all) 
* News 
• Traffic information 
* Weather forecasts 
* Financial updates 
* PTM-group call (send to some) 
* Taxi fleet management 


* Conferencing 


GPRS provides a service for bursty and bulky data transfer, radio resources 
on demand, shared use of physical radio resources, existing GSM functionality, 
mobile applications for a mass application market, volume dependent charging, 
and integrated services, operation and management. 


15.2.3 Enhanced Data Rates for GSM Enhancement 

The enhanced data rates for GSM enhancements (EDGE) [8] provides an evolu- 
tionary path from existing 2G systems (GSM, IS-136, PDC) to deliver some 3G 
services in existing spectrum bands. The advantages of EDGE include fast avail- 
ability, reuse of existing GSM, IS-136 and PDC infrastructure, as well as support 
for the gradual introduction of 3G capabilities. 

EDGE is primarily a radio interface improvement, but it can also be viewed 
as a system concept that allows GSM, IS-136, and PDC networks to offer a set of 
new services. EDGE has been designed to improve S/I by using link quality con- 
trol. Link quality control adapts the protection of the data to the channel quality 
so that for all channel qualities an optimal bit rate is achieved. 

EDGE can be seen as a generic air interface for efficiently providing high bit 
rates, facilitating an evolution of existing 2G systems toward 3G systems. The 
EDGE air interface is designed to facilitate higher bit rates than those currently 
achievable in existing 2G systems. The modulation scheme based on 8-PSK is used 
to increase the gross bit rate. GMSK modulation as defined in GSM is also part 
of the EDGE system. The symbol rate is 271ksps for both GMSK and 8-PSK, 
leading to gross bit rates per time slot of 22.8 kbps and 69.2 kbps, respectively. 
The 8-PSK pulse shape is linearized by GMSK to allow 8-PSK to fit into the GSM 
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Figure 15.8 Burst format for EDGE with 8-PSK. 


spectrum mask. The 8-PSK burst format is similar to GSM (see Figure 15.8). 
EDGE reuses the GSM carrier bandwidth and time slot structure. 

EDGE (also known as the 2.5G system) has been designed to enhance user 
bandwidth through GPRS. This is achieved through the use of higher-level mod- 
ulation schemes. Although EDGE reuses the GSM carrier bandwidth and time 
slot structure, the technique is by no means restricted to GSM systems; it can be 
used as a generic air interface for efficient provision of higher bit rates in other 
TDMA systems. In the Universal Wireless Communications Consortium (UWCC) 
the 136 high speed (136 HS) radio transmission technology (RTT) radio inter- 
face was proposed as a means to satisfy the requirements for an IMT-2000 RTT. 
EDGE was adopted by UWCC in 1998 as the outdoor component of 136 HS to 
provide 384kbps data service. 

The standardization effort for EDGE has two phases. In the first phase of 
EDGE the emphasis has been placed on enhanced GPRS (EGPRS) and enhanced 
CSD (ECSD). The second phase is defined with improvements for multimedia and 
real-time services. 

In order to achieve a higher gross rate, new modulation scheme, quater- 
nary offset quadrature amplitude modulation (QOQAM ) has been proposed for 
EDGE, since it can provide higher data rates and good spectral efficiency. An 
offset modulation scheme is proposed because it gives smaller amplitude variation 
than 16-QAM, which can be beneficial when using nonlinear amplifiers. EDGE 
co-exists with GSM in an existing frequency plan and provides link adaptation 
(modulation and coding are adapted for channel conditions). 


Radio Protocol Design 

The radio protocol strategy in EDGE is to reuse the protocols of GSM/GPRS 
whenever possible, thus minimizing the need for new protocol implementation. 
EDGE enhances both the GSM circuit-switched (HSCSD) and packet-switched 
(GPRS) mode operation. EDGE includes one packet-switched and one circuit- 
switched mode, EGPRS and ECSD, respectively. 


Enhanced GPRS (EGPRS). The EDGE radio link control (RLC) protocol is 
somewhat different from the corresponding GPRS protocol. The main changes 
are related to improvements in link quality control scheme. 

A link adaptation scheme regularly estimates the link quality and sub- 
sequently selects the most appropriate modulation and coding scheme for the 
transmission to maximize the user bit rate. The link adaptation scheme offers 


15.2 GSM Evolution for Data 485 


mechanisms for choosing the best modulation and coding scheme for the radio 
link. In GPRS only the coding schemes can be changed between two consecu- 
tive link layer control (LLC) frames. In the EGPRS even the modulation can be 
changed. Different coding and modulation schemes enable adjustment for the 
robustness of the transmission according to the environment. 

Another way to handle link quality variations is incremental redundancy. 
In this scheme, information is first sent with very little coding, yielding a high bit 
rate if decoding is immediately successful. If decoding is not successful, additional 
coded bits (redundancy) are sent until decoding succeeds. The more coding that 
has to be sent, the lower the resulting bit rate and the higher the delay. 

EGPRS supports combined link adaptation and incremental redundancy 
schemes. In this case, the initial code rate of the incremental redundancy scheme 
is based on measurements of the link quality. Benefits of this approach are the 
robustness and high throughput of the incremental redundancy operation in 
combination with lower delays and lower memory requirements enabled by the 
adaptive initial code rate. 

In EGPRS the different initial code rates are obtained by puncturing a different 
number of bits from a common convolutional code R = 1/3. The resulting coding 
schemes are given in Table 15.1. Incremental redundancy operation is enabled 
by puncturing a different set of bits each time a block is retransmitted, whereby 
the code rate is gradually decreased toward 1/3 for every new transmission of the 
block. The selection of the initial modulation and code rate is based on regular 
measurements of link quality. 


Table 15.1 Channel coding scheme in EDGE (PS transmission). 


Radio inter- Radio inter- 
face rate per face rate on 
Coding Gross bit rate time-slot 8 time-slots 
scheme (kbps) Code rate Modulation (kbps) (kbps) 
CS-1 22.8 0.49 GMSK 11.2 
CS-2 22.8 0.63 GMSK 14.5 
CS-3 22.8 0.73 GMSK 16.7 
CS-4 22.8 1.0 GMSK 22.8 
PCS-1 69.2 0.329 8-PSK 22.8 182.4 
PCS-2 69.2 0.496 8-PSK 34.3 274.4 
PCS-3 69.2 0.596 8-PSK 41.25 330.0 
PCS-4 69.2 0.746 8-PSK 51.60 412.8 
PCS-5 69.2 0.829 8-PSK 57.35 458.8 


PCS-6 69.2 1.000 8-PSK 69.20 553.6 
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Actual performance of modulation and coding scheme together with channel 
characteristics form the basis for link adaptation. Channel characteristics are 
needed to estimate the effects of a switch to another modulation and coding com- 
bination and include an estimated S/I ratio, but also time dispersion and fading 
characteristics (that affect the efficiency of interleaving). 

EGPRS offers eight additional coding schemes. The EGPRS user has eight 
modulation and coding schemes available compared to four for GPRS. Besides 
changes in the physical layer, modifications in the protocol structure are also 
needed. The lower layers of the user data plane designed for GPRS are the physi- 
cal, RLC MAC, and LLC layers. With EDGE functionality, the LLC layer will not 
require any modifications; however, the RLC/MAC layer has to be modified to 
accommodate features for efficient multiplexing and link adaptation procedures 
to support the basically new physical layer in the EDGE. 

In the case of GSM, EDGE with the existing GSM radio bands offers wireless 
multimedia, IP-based applications at the rate of 384 kbps with a bit-rate of 48 kbps 
per time slot and, under good radio conditions, up to 69.2 kbps per time slot. 


Enhanced CSD (ECSD). In this case, the objective is to keep the existing GSM 
CS data protocols as intact as possible. In order to provide higher data rates, mul- 
tislot solutions as in ECSD are provided in EDGE. This has no impact on link or 
system performance. 

A data frame is interleaved over 22 frames as in GSM, and three new 8-PSK 
channel coding schemes are defined along with the four already existing for GSM. 
The radio interface rate varies from 3.6 to 38.8 kbps per time slot (see Table 15.2). 

Fast introduction of EGPRS/ECSD services is possible by reusing the exist- 
ing transponder rate adapter unit (TRAU) formats and 16 kbps channel structure 
several times on the Apis interface. Since data above 14.4kbps cannot be rate 
adapted to fit into one 14.4 kbps TRAU frame, TRAU frames on several 16 kbps 


Table 15.2 Channel coding scheme in EDGE (CS transmission). 


Radio interface 
rate/time-slot 


Channel name Code rate Modulation (kbps) 
TCH/F2.4 0.16 GMSK 3.6 
TCH/F4.8 0.26 GMSK 6.0 
TCH/F9.6 0.53 GMSK 12.0 
TCH/F14.4 0.64 GMSK 14.5 
ECSD TCS-1 (NT + T) 0.42 8-PSK 29.0 
ECSD TCS-2 (T) 0.46 8-PSK 32.0 


ECSD TCS-3 (NT) 0.56 8-PSK 38.8 


15.2 GSM Evolution for Data 487 


channels are used to meet the increased capacity requirement. In this case the 
BTS is required to handle a higher number of 16 kbps Apis channels than time 
slots used on the radio interface. The benefit of using the current TRAU formats 
is that the introduction of new channel coding does not have any impact on the 
Apis transmission, but it makes it possible to hide the new coding from the TRAU. 
On the other hand, some additional complexity is introduced in the BTS due to 
modified data frame handling. 

Instead of reusing the current Api, transmission formats for EDGE, new 
TRAU formats and rate adaptation optimized for increased capacity is specified. 
The physical layer can be dimensioned statically for the maximum user rate speci- 
fied for particular EDGE service or more dynamic reservation of Apis transmission 
resources can be applied. The Apis resources can even be released and reserved 
dynamically during the call, if the link adaptation is applied. 

The channel coding schemes defined for EDGE in PS transmission are listed 
in Table 15.1 and in CS transmission in Table 15.2. 


Services Offered by EDGE 


PS Services. The GPRS architecture provides IP connectivity from the mobile 
station to an external fixed IP network. For each service, a QoS profile is defined. 
The QoS parameters include priority, reliability, delay, and maximum and mean bit 
rate. A specified combination of these parameters defines a service, and different 
services can be selected to suit the needs of different applications. 


CS Services. The current GSM standard supports both transparent (T) and 
nontransparent (NT) services. Eight transparent services are defined, offering 
constant bit rates in the range of 9.6 to 64 kbps. 

A nontransparent service uses RLP to ensure virtually error-free data deliv- 
ery. For this case, there are eight services offering maximum user bit rates from 
4.8 to 57.6 kbps. The actual user bit rate may vary according to channel quality 
and the resulting rate of transmission. 

The introduction of EDGE implies no change of service definitions. The bit 
rates are the same, but the way services are realized in terms of channel coding is 
different. For example, a 57.6 kbps nontransparent service can be realized with 
coding scheme ECSD TCS-1 (telephone control channel-1) and two time slots, 
while the same service requires four time slots with standard GSM using coding 
scheme TCH/F14.4. Thus, EDGE CS transmission makes the high bit rate services 
available with fewer time slots, which is advantageous from a terminal implemen- 
tation perspective. Additionally, since each user needs fewer time slots, more users 
can be accepted which increases the capacity of the system. 


Asymmetric Services Due to Terminal Implementation. ETSI has standard- 
ized two mobile classes: one that requires only GMSK transmission in the uplink 
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and 8-PSK in the downlink and one that requires 8-PSK in both links. For the 
first class, the uplink bit rate is limited to that of GSM/GPRS, while the EDGE bit 
rate is still provided in the downlink. Since most services are expected to require 
higher bit rates in the downlink than in the uplink, this is a way of providing 
attractive services with a low complexity mobile station. Similarly, the number of 
time slots available in the uplink and downlink need not be the same. However, 
transparent services will be symmetrical. 


EDGE Implementation 

EDGE makes use of the existing GSM infrastructure in a highly efficient manner. 
Radio network planning will not be greatly affected since it will be possible to 
reuse many existing BTS sites. GPRS packet switching nodes will be unaffected, 
because they function independently of the user bit rates, and any modifications to 
the switching nodes will be limited to software upgrades. There is also a smooth 
evolution path defined for terminals to ensure that EDGE-capable terminals will 
be small and competitively priced. 

EDGE-capable channels will be equally suitable for standard GSM services, 
and no special EDGE, GPRS, and GSM services will be needed. From an operator 
viewpoint this allows a seamless introduction of new EDGE services—perhaps 
starting with the deployment of EDGE in the service hot spots and gradually 
expanding coverage as demand dictates. The roll-out of EDGE-capable BSS hard- 
ware can become part of the ordinary expansion and capacity enhancement of the 
network. The wideband data capabilities offered by EDGE allows a step-by-step 
evolution to IMT-2000, probably through a staged deployment of the new 3G air 
interface on the existing core GSM network. Keeping GSM as the core network 
for the provision of 3G wireless services has additional commercial benefits. It 
protects the investment of existing operators; it helps to ensure the widest possible 
customer base from the outset; and it fosters supplier competition through the 
continuous evolution of systems. 

GSM operators who win licenses in new 2 GHz bands will be able to intro- 
duce IMT-2000 wideband coverage in areas where early demand is likely to be 
greatest. Dual-mode EDGE/IMT-2000 mobile terminals will allow full roaming 
and handoff from one system to the other, with mapping of services between the 
two systems. EDGE will contribute to the commercial success of the 3G system in 
the vital early phases by ensuring that IMT-2000 subscribers will be able to enjoy 
roaming and interworking globally. 

Building on an existing GSM infrastructure will be relatively fast and inex- 
pensive, compared to establishing a total 3G system. The intermediate move to 
GPRS and later to EDGE will make the transition to 3G easier. 

While GPRS and EDGE require new functionality in the GSM network, 
with new types of connections to external packet data networks they are essen- 
tially extensions of GSM. Moving to a GSM/IMT-2000 core network is likewise 
a further extension of this network. 


15.3 Third-Generation (3G) Wireless Systems 489 


Table 15.3 Comparison of GSM data services. 


Max. sustained 


Service type Data unit user data rate Technology Resources used 

Short message Single 140 octet 9bps Simplex circuit SDCCH or 

service (SMS) packet SACCH 

Circuit-switched 30 octet frames 9600 bps Duplex circuits TCH 

data 

HSCSD 192 octet 115kbps Duplex circuits 1-8 TCH 
frames 

GPRS 1600 octet 171kbps Virtual circuit/ PDCH (1-8 TCH) 
frames packet switching 

EDGE 384kbps Virtual circuit/ 1-8 TCH 


packet switching 


Note: SDCCH: Stand-alone Dedicated Control Channel; SACCH: Slow Associated Control Channel; 
TCH: Traffic Channel; PDCH: Packet Data Channel (all refer to GSM logical channels). 


EDGE provides GSM operators — whether or not they get a new 3G 
license— with a commercially attractive solution to develop the market for wide- 
band multimedia services. Familiar interfaces such as the Internet, volume-based 
charging, and a progressive increase in available user data rates will remove some 
of the barriers to large-scale take-up of wireless data services. The way forward 
to 3G services will be a staged evolution from today's GSM data services through 
GPRS and EDGE. 

Increased user data rates over the radio interface requires redesign of physi- 
cal transmission methods, frame formats, and signaling protocols in different 
network interfaces. The extent of the modification needed depends on the user 
data rate requirement, i.e., whether the support of higher data is required or 
merely a more efficient use of the radio time slot to support current data services 
is needed. 

Several alternatives to cover the increased radio interface data rates on the 
Apis interface for EGPRS and ECSD can be envisioned. The existing physical 
structure can be reused as much as possible or a new transmission method opti- 
mized for EDGE can be specified. Table 15.3 provides a comparison of GSM data 
services with GPRS and EDGE. 


15.3 Third-Generation (3G) Wireless Systems 


The International Telecommunication Union (ITU) began studies on the globaliza- 
tion of personal communications in 1986 and identified the long-term spectrum 
requirements for the future third-generation (3G) mobile wireless telecommuni- 
cations systems. In 1992, the ITU identified 230 MHz of spectrum in the 2 GHz 
band to implement the IMT-2000 system on a worldwide basis for satellite and 
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terrestrial components. The aim of IMT-2000 is to provide universal coverage 
enabling terminals to have seamless roaming across multiple networks. The ITU 
accepted the overall standardization responsibility of IMT-2000 to define radio 
interfaces that are applicable in different radio environments including indoor, 
outdoor, terrestrial, and satellite [23—28, 30-32]. 

Figure 15.9 provides an overview of the IMT family. IMT-DS is the direct 
spread (DS) technology and includes WCDMA systems. This technology is 
intended for UMTS terrestrial radio access (UTRA)-FDD and is used in Europe 
and Japan. IMT-TC family members are the UTRA-TDD system that uses time- 
division (TD) CDMA, and the Chinese TD-synchronous CDMA (TD-SCDMA). 
Both standards are combined and the third-generation partnership project (3GPP) 
is responsible for the development of the technology. IMT-MC includes multiple 
carrier (MC) cdma2000 technology, an evolution of the cdmaOne family. 3GPP2 
is responsible for standardization. IMT-SC is the enhancement of the US TDMA 
systems. UWC-136 is a single carrier (SC) technology. This technology applies 
EDGE to enhance the 2G 15-136 standard. It is now integrated into the 3GPP 
efforts. IMT-FT is a frequency time (FT) technology. An enhanced version of the 
cordless telephone standard digital European cordless technology (DECT) has 
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Figure 15.9 IMT family. 
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been selected for low mobility applications. The ETSI has the responsibility for 
standardization of DECT. 

3G mobile telecommunications systems are intended to provide worldwide 
access and global roaming for a wide range of services. Standards bodies in Europe, 
Japan, and North America are trying to achieve harmony on key and interrelated 
issues including radio interfaces, system evolution and backward compatibility, 
user's migration and global roaming, and phased introduction of mobile services 
and capabilities to support terminal mobility. Universal Mobile Telecommunica- 
tion System (UMTS) studies were carried out by ETSI in parallel with IMT-2000 
to harmonize its efforts with ITU. In Japan and North America, standardization 
efforts for 3G were carried out by the Association of Radio Industries Business 
(ARIB) and the TIA committee TR45, respectively. Two partnership projects, 
3GPP and 3GPP2, are involved in harmonizing 3G efforts in Europe, Japan, and 
North America. 

In Europe, 3G systems are intended to support a substantially wider and 
enhanced range of services compared to the 2G (GSM) system. These enhance- 
ments include multimedia services, access to the Internet, high rate data, and so 
on. The enhanced services impose additional requirements on the fixed network 
functions to support mobility. These requirements are achieved through an evolu- 
tion path to capitalize on the investments for the 2G system in Europe, Japan, and 
North America. 

In North America, the 3G wireless telecommunication system, cdma2000 
was proposed to ITU to meet most of the IMT requirements in the indoor office, 
indoor to outdoor pedestrian, and vehicular environment. In addition, the 
cdma2000 satisfies the requirements for 3G evolution of 2G TIA/EIA 95 family 
of standards (cdmaOne). 

In Japan, evolution of the GSM platform is planned for the IMT (3G) core 
network due to its flexibility and widespread use around the world. Smooth migra- 
tion from GSM to IMT-2000 is possible. The service area of the 3G system over- 
lays with the existing 2G (PDC) system. The 3G system connects and interworks 
with 2G systems through an interworking function (IWF). An IMT-2000-PDC 
dual mode terminal as well as the IMT-2000 single mode terminal are deployed. 

UMTS as discussed today and introduced in many countries is based on the 
initial release of UMTS standards referred to as release 99 or R99. This (release) 
is aimed at a cost-effective migration from GSM to UMTS. After R99 the release 
of 2000 or ROO followed. 3GPP decided to split ROO into two standards and call 
them release 4 (Rel-4) and release 5 (Rel-5). The version of all standards final- 
ized for R99 is now referred to as Rel-3 by 3GPP. Rel-4 introduces QoS in the 
fixed network plus several execution environments (e.g., MExE, mobile execution 
environment) and new service architectures. Rel-4 was suspended in March 2001. 
Rel-5 specifies a new core network. The GSM/GPRS-based core network will be 
replaced by an almost all-IP core network. The content of Rel-5 was suspended 
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in March 2002. This standard integrates IP-based multimedia services (IMS) 
controlled by the IETF’s session initiation protocol (SIP). A high-speed downlink 
packet access (HSDPA) service with 8 to 10 Mbps was included. Also, a wideband 
16 kHz adaptive multirate (AMR) codec was added for better quality. End-to- 
end QoS and several data compression techniques were added. 3GPP is currently 
working on Rel-6. This standard includes multiple input multiple output (MIMO) 
antennas, enhanced multimedia service (MMS), security enhancement, WLAN/ 
WWAN interworking, broadcast/multicast services, enhanced IMS, IP emergency 
call, and many more management features. 

A primary assumption for UMTS is that it is based on an evolved GSM core 
network. This provides backward compatibility with GSM in terms of network 
protocols and interfaces (MAP, ISUP (ISDN user part), etc.) The core network 
supports both GSM and UMTS/IMT-2000 services, including handoff and roam- 
ing between the two (see Figure 15.10). The proposed W-CDMA based UMTS 
terrestrial radio access network (UTRAN) is connected to the GSM-UMTS core 
network using a new multi-vendor interface (I,,). The transport protocol within 
the new radio network and the core network will be IP. 

There is a clear separation between the services provided by UTRAN and 
the actual channels used to carry these services. All radio network functions (such 
as resource control) are handled within the radio access network and clearly sep- 
arated from the service and subscription functions in the UMTS core network 
(UCN). The GSM-UMTS network, shown in Figure 15.11, consists of three main 
entities: 
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Figure 15.10 Evolution to UMTS/IMT-2000 in a GSM environment. 


15.3 Third-Generation (3G) Wireless Systems 493 


GSM-UMTS 
core network 
(UCN) 


GSM 
GSM radio access 285 
TONER умт | MSC UMTS 
Addition Addition 


1 

1 

i 

1 

1 

Шин ыы eem UMTS 

intei 

І 

І js 

i SGSN 

1 ü | 
1 
1 


UMTS radio access 


(UTRAN); © REST крк coe 34m шд БАРАТ epg tt heey 
BSS: Base Station Subsystem N-ISDN: National ISDN 
MSC: Mobile Switching Center HLR: Home Location Register 
SGSN: Serving GPRS Support Node URAN: UMTS Radio Access Network 
GMSC: Gateway MSC IN SCP: Intelligent Service Center Point 


GGSN: Gateway GPRS Support Node 


Figure 15.11 General GSM-UMTS network architecture. 


e GSM-UMTS core network (UCN) 
* UMTS terrestrial radio access network (UTRAN) 
• GSM base station subsystem (BSS) 

Like the GSM-GPRS core network, the GSM-UMTS core network has two 
different parts: a circuit-switched MSC and a packet-switched GRPS support node 
(GSN). The core network access point for GSM circuit-switched connections is 
the GSM MSC, and for packet-switched connections it is the SGSN. 

GSM-defined services (up to and including GSM Phase 2+) are supported 
in the usual GSM manner. The GSM-UMTS core network implements supple- 
mentary services according to GSM principles (HLR-MSC/VLR). New services, 
beyond Phase 2+ are created using new service capabilities. These service capa- 
bilities may be seen as building blocks for application development and include: 

* Bearers defined by QoS 

* Mobile station execution environment (MExE) 
Telephony value-added services (TeleVAS) 
Subscriber identity module (SIM) toolkit 


* [ocation services 


Open interfaces to mobile network functions 
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* Down-loadable application software 


* Intelligent Network/Customized Applications for Mobile Enhanced Logic 
(IN/CAMEL) and service nodes. 


In addition to new services provided by the GSM-UMTS network itself, many 
new services and applications will be realized using a client/server approach, with 
servers residing on service local area networks (LANs) outside the GSsM-UMTS 
core network. For such services, the core network simply acts as a transparent 
bearer. This approach is in line with current standardization activities, and is 
important from a service continuity point of view. The core network will ulti- 
mately be used for the transfer of data between the end-points, the client and the 
server. 

IN techniques are one way to provide seamless interworking across GSM- 
UMTS networks. CAMEL already provides the basis for GSM/IN interworking. 
The IN infrastructure may be shared by fixed and mobile networks, and can sup- 
port fixed/mobile service integration, as needed by International Mobile Telecom- 
munications (IMT). The inherent support for third-party service providers in IN 
means such providers could offer all or part of the integrated services. This role of 
IN is already apparent in services such as virtual private networks (VPNs), regional 
subscription and one number, which are available as network-independent and 
customer-driven services. 

Service nodes and IN can play a complementary role. IN is suitable for sub- 
scription control and group services where high service penetration in a very wide 
area with frequent service invocation are more important than sophistication. 
Service nodes are better for providing differentiated user interfaces; e.g., personal 
call and messaging services that use advanced in-band processing and span several 
access networks. 

To make the most of the new radio access network's capabilities, and to 
cater to the large increase in data traffic volume, asynchronous transmission 
mode (ATM) is used as the transport protocol within UTRAN and toward the 
GSM-UMTS core network. The combination of an ATM cell-based transport 
network, WCDMA’s use of variable-rate speech coding with improved channel 
coding, and an increased volume of packet data traffic over the air interface will 
mean a saving of about 50% in transmission costs, compared with equivalent 
current solutions. ATM, with the newly standardized AAL2 adaptation layer, 
provides an efficient transport protocol, optimized for delay-sensitive speech ser- 
vices and packet data services. Statistical multiplexing in ATM provides maxi- 
mum utilization of existing and new transmission infrastructure throughout the 
entire network. 

In the complex multiservice, multivendor, multiprovider environment of 
3G wireless services network management is a critical issue. The growth of 
packet data traffic requires new ways of charging for services and new billing 
systems to support them. There will continue to be a growing demand for better 
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customer care and cost reductions in managing mobile networks, driven by the 
need to: 


Provide sophisticated personal communications services 


Expand the customer base beyond the business user base 


Separate the service provider and network operator roles 


Provide *one-stop" billing for a range of services 


New operations and management functions are needed to support new ser- 
vices and network functionality. Standardization of interfaces is critical especially 
for alignment with current management interfaces in the GSM-UMTS core net- 
work. Management information needs to be part of standard traffic interfaces. 

With the right service strategy and network planning, GSM operators will 
be able to capitalize on the wideband multimedia market through a staged evolu- 
tion of their core networks, with the addition of new radio access technology as 
it becomes available. 


15.4 UMTS Network Reference Architecture 


A UMTS system can be divided into a set of domains and the reference points that inter- 
connect them. Figures 15.12 and 15.13 show these domains and reference points. 

A simplified mapping of functional entities to the domain model is shown in 
Figure 15.14. Note that this is a reference model and does not represent any physical 
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Figure 15.12 UMTS domains and reference points. 
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Figure 15.13 UMTS —3G reference architecture. 
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Figure 15.14 Simplified UMTS network reference model. 
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architecture. The I,, is split functionally into two logical interfaces, I,,); connecting 
the packet switched domain to the access network and the Т connecting the circuit 
switched domain to the access network. The standards do not dictate that these are 
physically separate, but the user plane for each is different and the control plane may 
be different. The I logically connects radio network controllers (RNCs) but could be 
physically realized by a direct connection between RNCs or via the core network. 


15.5 Channel Structure in UMTS Terrestrial Radio 

Access Network 
The UMTS terrestrial radio access network (UTRAN) [10-22] has an access stra- 
tum and nonaccess stratum. The access stratum includes air interface and pro- 
vides functions related to OSI layer 1, layer 2, and the lower part of layer 3. The 
non-access stratum deals with communication between user equipment (UE) and 
core network (CN) and includes OSI layer 3 (upper part) to layer 7. 

The radio interface, U,, is the interface between UE and UTRAN. It consists 
of three protocol layers: physical layer, data link layer, and network layer (see 
Figure 15.15). The radio interface provides physical channels to carry data over 
the radio path and logical channels to carry a particular type of data. There are 
two types of logical channels: signaling and control, and traffic channel. 

The physical layer in UTRAN performs the following functions: 


* Forward error correction, bit-interleaving, and rate matching 

* Signal measurements 

* Micro-diversity distribution/combining and soft handoff execution 

* Multiplexing/mapping of services on dedicated physical codes 
Layer #3 


OSI Layer #2 


Layer #1 


Layer #1: 

- Physical Layer 
Layer #2: 

- Upper part: Radio Link Control (RLC) 

- Lower part: Medium Access Control (MAC) 
Layer #3: 

- Lower part: Radio Resource Control (RRC) 


Figure 15.15 OSI layer model and air interface protocols. 
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* Modulation, spreading, demodulation, despreading of physical channels 

* Frequency and time (chip, bit, slot, frame) synchronization 

* Fast closed-loop power control 

* Power weighting and combining of physical channels 

* Radio frequency (RF) processing. 

The medium access control sublayer is responsible for efficiently transfer- 

ring data for both real-time (CS) and non-real-time (PS) services to the physical 
layer. MAC offers services to the radio link control (RLC) sublayer and higher 


layers. The MAC layer provides data transfer services on logical channels. MAC 
is responsible for 


* Selection of appropriate transport format (basically bit rate) within a predefined 
set, per information unit delivered to the physical layer 


* Service multiplexing on random access channel (RACH), forward access 
channel (FACH), and dedicated channel (DCH) 


* Priority handling between data flow of a user as well as between data flows 
from several users 


* Access control on RACH and FACH 
* Contention resolution on RACH 
Radio link control (RLC) sets up a logical link over the radio interface and is 
responsible for fulfilling QoS requirements. RLC responsibilities include: 
* Segmentation and assembly of the packet data unit 
* Transfer of user data 
* Error correction through retransmission 
* Sequence integrity 
* Duplication information detection 
* Flow control of data 
The radio resource control (RRC) layer broadcasts system information, 
handles radio resources (i.e., code allocation, handover, admission control, and 
measurement/control report), and controls the requested QoS. The RRC layer 
offers the following services to the core network: 
* General control (GC) service used as an information broadcast service 
* Notification (Nt) service used for paging and notification of a selected UE 
* Dedicated control (DC) service used to establish/release a connections and 


transfer messages 


The channels in UTRAN are physical, transport, and logical (see Figure 15.16). 


Е = = Logical 
L2/ LLC I r Е I o о т I g Channels 
оао об o Ы v G 
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L2/MAC 
Transport 
Channels ^ 


* Physical channels: identified by code, frequency, phase (//Q) (UL only) 
and time slot (TDD only) 


* Transport channels: offer information transfer services to the MAC layer 


* Logical channels: are used by MAC layer to provide data transport services 


BCCH: Broadcast Control Channel PCCH: Paging Control Channel DCCH: Dedicated Control Channel 
ODCCH: ODMA Dedicated Control Channel OCCCH: ODMA Common Control Channel DTCH: Dedicated Traffic Channel 
ODTCH: ODMA Dedicated Traffic Channel CTCH: Common Traffic Channel CCCH: Common Control Channel 
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Figure 15.16 UTRAN channels. 
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The functions of logical control channels and logical traffic channels in 
UTRAN are listed in Tables 15.4 and 15.5. 

In UTRAN transport channels can be either common (i.e., shared between 
users) or dedicated channels. They offer information transfer services to the MAC 
sublayer. Dedicated transport channels are dedicated channel (DCH) (up link, 
UL and down link, DL), fast uplink signaling channel (FAUSCH), and ODMA 


Table 15.4 Logical control channel in UTRAN. 


Channel 
Broadcast control channel (BCCH) 


Paging control channel (PCCH) 


Common control channel (CCCH) 


Dedicated control channel (DCCH) 


ODMA common control channel (OCCCH) 


ODMA dedicated control channel (ODCCH) 


Function 


DL channel for broadcasting system and 
control information 


DL channel to transfer page information, 
used when: (1) network does not know the 
location of cell of the mobile, and (2) mobile 
is in cell connected state (using sleep mode) 


Bidirectional channel to transfer control 
information between network and mobile, it 
is used: (1) by mobile without RRC connec- 
tion with the network, and (2) by mobile 
using common transport channel to access 
a new cell after cell resection 


Point-to-point bidirectional channel to trans- 
mit dedicated information between a mobile 
and network. The channel is established 
through RRC connection setup procedure 


Bidirectional channel to transmit control 
information between mobiles 


Point-to-multipoint bidirectional channel 

to transmit dedicated control information 
between mobiles. This channel is established 
through RRC connection setup procedure 


Table 15.5 Logical traffic channels in UTRAN. 


Channel 


Dedicated traffic channel (DTCH) 


Function 


Point-to-point, dedicated to one mobile to transfer user 


information. A DTCH can exist in both UL and DL. 


ODMA traffic channel (ODTCH) 


Point-to-point channel dedicated to one mobile to 


transfer user information between mobiles. An ODTCH 
can exist in relay link. A point-to-multipoint unidirec- 
tional channel to transfer dedicated user information 
for all or a group of specified mobiles. 
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(opportunity driven multiple access) dedicated channel (ODCH). The common 
DL transport channels are listed in Table 15.6. 

The mapping between logical and transport channels is given below (see 
Figure 15.17): 


¢ BCCH is connected to BCH 
• PCCH is connected to PCH 
e CCCH is connected to RACH and FACH 


Table 15.6 UTRAN common transport channels. 


Channel Function 


Broadcast channel (BCH) DL channel used to broadcast system- and cell-specific 
information, transmitted over the entire cell with low 
fixed bit rate 


Forward access channel (FACH) DL channel transmitted over the entire or only a part of cell 
using beam-forming antennas, uses slow power control 


Paging channel (PCH) DL channel transmitted over the entire cell, transmission 
of PCH is associated with the transmission of a physical 
layer signal, the paging indicator, to support efficient 
sleep mode procedure 


Random access channel (RACH) UL channel received over the entire cell, characterized 
by a limited size data field, a collision risk, and by use of 
open loop power control 


Common packet channel (CPCH) UL channel, contention-based random access channel used 
for transmission of bursty data traffic, associated with a 
DCH on DL, which provides power control for the UL CPCH 


Downlink shared channel (DSCH) DL channel shared by several mobiles, associated with 
a DCH 


BCCH-SAP PCCH-SAP DCCH-SAP CCCH-SAP DTCH-SAP 


MAC 
SAPs 


BCH PCH CPCH FAUSCH RACH FACH USCH DSCH DCH 


Figure 15.17 Mapping between logical and transport channels in UTRAN. 
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e DTCH can be connected to either RACH and FACH and DSCH, to DCH 
and DSCH, to a DCH, to a CPCH (FDD mode only) 


• СТСН can be connected to DSCH, FACH, or BCH 


• DCCH can be connected to either RACH and FACH, to RACH and DSCH, 
to DCH and DSCH, to a DCH, a CPCH (TDD mode only), to FAUSCH, 
CPCH (FDD mode only). 


In UTRAN, the basic physical resource is a physical channel identified by 
code and frequency. Physical channels consist of radio frames and time slots 
(see Figure 15.18). The length of a radio frame is 10 ms and one frame consists of 
15 time slots. For DL channels two codes are used, one to identify the cell and the 
other to identify a particular channel within that cell. For UL a long code is used 
to identify the channel. The UL channel uses different data streams transmitted on 
the I and Q branch. A physical channel corresponds to a specific carrier frequency, 
code(s), and on UL a relative phase (0, 7/2). 

The UL dedicated physical channel (DPCH) is a user dedicated, point-to- 
point channel between UE and node B. These channels carry dedicated channels 
at various rates up to 2Mbps. The UL-dedicated physical data channels are I/Q 
(i.e., DPDCH on I-branch and DPCCH on Q-branch) and code multiplexed. There 
are two types of DPCH: (1) dedicated pbysical data channel (DPDCH) to carry 
user data and signaling information generated at layer 2 (there may be none, one, 
or several DPDCHs); and (2) dedicated physical control channel (DPCCH) to 
carry control information generated at layer 1 (pilot bits, transmit power control 
(TPC) commands, feedback information (FBI) commands, and optional transport 
format combination indicator (TFCI)). For each layer 1 connection, there is only 
one UL DPCCH. DPCCH rate and power remain constant. The UL dedicated 
physical channel carries 10 x 2^ (k = 0, 1, ..., 6) bits per slot and may have a 
spreading factor (SF) from 256 and 4. 

The UL common physical channels are physical random access channel 
(PRACH) used to carry the RACH and fast uplink signaling channel (FAUSCH) 
and physical common packet channel (PCPCH) to carry CPCH. 

The DL dedicated physical data channel is time multiplexed. The DL dedi- 
cated physical channel carries 10 x 2^ (k = 0, 1, ..., 7) bits per slot and may have 
spreading factor (SF = 512/2*) from 512 to 4 (see Figure 15.18). 

The DL common physical channels include the following channels: 


* Primary common control physical channel (PCCPCH) carries BCH, rate 
30 kbps, SF = 256; continuous transmission; no power control 

* Secondary common control physical channel (SCCPCH) carries FACH and 
PCH, transmitted when data is available; SF range is from 256 to 4 

* Synchronization channel (SCH) is used for cell search. It consists of two 
sub-channels: primary SCH transmits a modulated code of 256 chips once 
every slot, and secondary SCH transmits repeatedly 15 codes of 256 chips. 
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Tsuper = 720 ms 


Slot #1 Slot #2 Slot #3 Slot #15 


Downlink 
(Time 
multiplexed) 


Тю = 2560 chips, 10 x 2*bits (k = 0,...7) 


Tsuper = 720 ms 


Uplink 
(ГО 


Slot #1 Slot #2 Slot #3 Slot #15 
multiplexed) 


DPCCH 
Data 
Тао = 2560 chips, 10 x 2‘ bits (К = 0,...6) 
DPCH is: * User dedicated, Point-to-point channel TFCI: Transport Format Combination Indicator 
* Carries Data Channel (DCH) FBI: Feedback Information 
• Various bit rates up to 2 Mbps TPC: Transmit Power Control 


Figure 15.18 UTRA dedicated physical channels (DPCHs) framing. 


* Physical downlink shared channel (PDSCH) carries DSCH; shared by users 
based on code multiplexing; associated with DPCH. 


* Acquisition indicator channel (AICH) carries acquisition indicators. 
* Page indicator channel (PICH) carries a page for UE; fixed rate, SF — 256 
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Transport Channels Physical Channels 
Primary Common Pilot Channel (PCPICH) 
Broadcast Channel (ВСН) ———————— —— — —— Primary Common Control Physical Channel 
(PCCPCH) 
Forward Access Channel (FACH) Secondary Common Control Physical Channel 
Paging Channel (PCH) (SCCPCH) 


doi MA ri pa рр йн. Mm a Physical Random Access Channel (PRACH) 
Fast Uplink Signaling Channel (FAUSCH) 


Common Packet Channel (CPCH) —————— —— Physical Common Packet Channel (PCPCH) 

Dedicated Channel (DCH) —————— — — — — —- Dedicated Physical Data Channel (DPDCH) 
Dedicated Physical Control Channel 
(DPCCH) 

Downlink Shared Channel (DSCH) Physical Downlink Shared Channel (PDSCH) 


Page Indication Channel (PICH) 
Acquisition Indication Channel (AICH) 
Synchronization Channel (SCH) 


Figure 15.19 Mapping between transport and physical channels in UTRA. 


* Primary common pilot channel (PCPICH) is used as phase reference for 
SCH, PCCPCH, AICH, PICH, and default phase reference for all other DL 
physical channels, one per cell and broadcast over entire cell. 


* Secondary common pilot channel (SCPICH) is a continuous channel with 
the same spreading and scrambling codes, transmitted on different antennas 
in case of DL transmit diversity; SF — 256. It may be transmitted over only 
part of the cell. 


The mapping between transport and physical channels is shown in 
Figure 15.19. 


15.6 Spreading and Scrambling in UMTS 


In a WCDMA system, isolation between users in the downlink is accomplished 
through the combination of user-specific channelization codes and cell-specific 
scrambling codes. Channelization codes are generated recursively to form a 
binary tree structure (see Figure 15.20). Spreading is used in combination with 
scrambling. Scrambling is used on top of spreading to separate mobile termi- 
nals or cells from each other. Scrambling does not change the chip rate nor the 
bandwidth. Transmissions from a single source are separated by channelization 
codes based on an orthogonal variable spreading factor (OVSF) technique (see 
Appendix D) to allow spreading to be changed while maintaining orthogonality 
between codes. 
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When a code is intended to be used, no other code generated from the 
intended code can be used; no code between the intended code and the root code 
can be used. These restrictions apply to individual sources; they do not apply to 
different cells in downlink or different mobile stations in the uplink. Table 15.7 
lists the characteristics of synchronization, channelization, and scrambling codes 
used ina WCDMA system. 


C2,1 = (1, 1) 


C1,1 = 1 


C4,1 = (1, 1, 1,1) [ 


C42 = (1,1, -1, –1) 


С4,3 = (1, 71, 1, -1) 


С2,2 = (1, -1) 


C4,4 = 


(1, -1, -1, 1) [ 


Figure 15.20 Channelization code tree. 


Table 15.7 Synchronization, channelization, and scrambling codes of a WCDMA system. 


Type 


Length 
Duration 
Number of 
codes 


Spreading 


Usage 


Synchronization 
codes 


Gold codes, 
primary synchroni- 
zation code (PSC) 
and secondary 
synchronization 
code (SSC) 


256 chips 


66.67 us 


1 primary 
code/16 secondary 
codes 


No, does not 
change bandwidth 


To enable terminal 
to locate and syn- 
chronize to the 
cells’ main control 
channels 


Channelization 
codes 


OVSF, sometimes 
called Walsh 
codes 


4-512 chips 


1.04 ps—133.34 ps 


Spreading 
factor: UL: 4-256 
DL: 4-512 


Yes, increases 
bandwidth 


UL: To separate 
physical data and 
control data from 
same terminal 

DL: To separate con- 
nection to different 
terminals in a cell 


Scrambling codes, 
uplink 


Complex-valued 
gold code seg- 
ments (long) or 
complex-valued 
S(2) codes (short) 


38,400 chips/256 
chips 


10 ms/66.67 ws 
16,777,216 


No, does not 
change bandwidth 


Separation of 
terminals 


Scrambling codes, 
downlink 


Complex-valued 
gold code seg- 
ments. Pseudo 
noise (PN) codes 


38,400 chips 


10 ms 


512 primary/ 
15 secondary for 
each primary code 


No, does not 
change bandwidth 


Separation of cells 
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15.7 UMTS Terrestrial Radio Access Network Overview 
The UTRAN consists ofa set of radio network subsystems (RNSs) (see Figure 15.21). 
The RNS has two main logical elements: Node B and an RNC. The RNS is respon- 
sible for the radio resources and transmission/reception in a set of cells. A cell 
(sector) is one coverage area served by a broadcast channel. 

An RNC is responsible for the use and allocation of all the radio resources 
of the RNS to which it belongs. The RNC also handles the user voice and packet 
data traffic, performing the actions on the user data streams that are necessary to 
access the radio bearers. The responsibilities of an RNC are: 

* Intra UTRAN handover 

e Macro diversity combining/splitting of I,,, data streams 
* Frame synchronization 

* Radio resource management 


Outer loop power control 


I, interface user plane setup 
* Serving RNS (SRNS) relocation 
• Radio resource allocation (allocation of codes, etc.) 


* Frame selection/distribution function necessary for soft handover (functions 
of UMTS radio interface physical layer) 


* UMTS radio link control (RLC) sublayers function execution 


* Termination of MAC, RLC, and RRC protocols for transport channels, 
i.e., DCH, DSCH, RACH, FACH 


* [,y's user plane protocols termination 


A Node B is responsible for radio transmission and reception in one or more 
cells to/from the user equipment (UE). The logical architecture for Node B is 
shown in Figure 15.22. 


Core Network (CN) 


RNS 


RNC: Radio Network Controller 
RNS: Radio Network Subsystem 


Figure 15.21 UTRAN logical architecture. 


Controlling Radio Network Controller (RNC) 


Naste E осн I DCH осн М: : DCH осн IDCH ommunicatioi 
Sot : data port data port data port control | i \data port data port data port control 
port i i port 


Traffic Termination Point (TTP) | | Traffic Termination Point (TTP) 


Figure 15.22 Node B logical architecture. 
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The following are the responsibilities of the Node B: 


e Termination of Т„ь interface from RNC 
* Termination of MAC protocol for transport channels RACH, FACH 


* Termination of MAC, RLC, and RRC protocols for transport channels: 
BCH, PCH 


* Radio environment survey (BER estimate, receiving signal strength, etc.) 


Inner loop power control 


Open loop power control 

* Radio channel coding/decoding 

* Macro diversity combining/splitting of data streams from its cells (sectors) 
* Termination of U, interface from UE 


Error detection on transport channels and indication to higher layers 
* FEC encoding/decoding and interleaving/deinterleaving of transport channels 


Multiplexing of transport channels and demultiplexing of coded composite 
transport channels 


Power weighting and combining of physical channels 


* Modulation and spreading/demodulation and despreading of physical 
channels 


Frequency and time (chip, bit, slot, frame) synchronization 
* RF processing 


15.7.1 UTRAN Logical Interfaces 

In UTRAN protocol structure is designed so that layers and planes are logically 
independent of each other and, if required, parts of protocol structure can be 
changed in the future without affecting other parts. 

The protocol structure contains two main layers, the radio network layer 
(RNL) and the transport network layer (TNL). In the RNL, all UTRAN-related 
functions are visible, whereas the TNL deals with transport technology selected to 
be used for UTRAN but without any UTRAN-specific changes. A general protocol 
model for UTRAN interfaces is shown in Figure 15.23. 

The control plane is used for all UMTS-specific control signaling. It includes 
the application protocol (i.e., radio access network application part (RANAP) in 
Ij, radio network subsystem application part (RNSAP) in I„ and node В applica- 
tion part (NBAP) in Гь). The application protocol is used for setting up bearers 
to the UE. In the three-plane structure the bearer parameters in the application 
protocol are not directly related to the user plane technology, but rather they are 
general bearer parameters. 
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Network Data 
Layer (RNL) Stream(s) 


Transport Network 
Control Plane 


ALCAP(s) 
Transport 
Network Г { i i 
Signaling Signaling 
s иы Bearer 5) Бао 


АСАР: Access Link Control Application Part 


Figure 15.23 General protocol model for UTRAN interfaces. 


User information is carried by the user plane. The user plane includes data 
stream(s), and data bearer(s) for data stream(s). Each data stream is characterized 
by one or more frame protocols specified for that interface. 

The transport network control plane carries all control signaling within the 
transport layer. It does not include radio network layer information. It contains 
access link control application part (ALCAP) required to set up the transport 
bearers (data bearers) for the user plane. It also includes the signaling bearer 
needed for the ALCAP. The transport plane lies between the control plane and 
the user plane. The addition of the transport plane in UTRAN allows the applica- 
tion protocol in the radio network control plane to be totally independent of the 
technology selected for the data bearer in the user plane. 

With the transport network control plane, the transport bearers for data 
bearers in the user plane are set up in the following way. There is a signaling 
transaction by application protocol in the control plane that initiates set-up of 
the data bearer by the ALCAP protocol specific for the user plane technology. 
The independence of the control plane and user plane assumes that an ALCAP 
signaling occurs. The ALCAP may not be used for all types of data bearers. 
If there is no ALCAP signaling transaction, the transport network control plane 
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is not required. This situation occurs when preconfigured data bearers are used. 
Also, the ALCAP protocols in the transport network control plane are not used 
to set up the signaling bearer for the application protocol or the ALCAP during 
real-time operation. 


I, Interface 

The UMTS I, interface is the open logical interface that interconnects one 
UTRAN to the UMTS core network (UCN). On the UTRAN side the I, inter- 
face is terminated at the RNC, and at the UCN side it is terminated at U-MSC. 
The I, interface consists of three different protocol planes—the radio network 
control plane (RNCP), the transport network control plane (TNCP), and the 
user plane (UP). 

The RNCP performs the following functions: 


* [t carries information for the general control of UTRAN radio network 
operations. 


* [t carries information for control of UTRAN in the context of each specific 
call. 


* [t carries user call control (CC) and mobility management (MM) signaling 
messages. 


The control plane serves two service domains in the core network, the 
packet-switched (PS) domain and circuit-switched (CS) domain. The CS 
domain supports circuit-switched services. Some examples of CS services 
are voice and fax. The CS domain can also provide intelligent services such 
as voice mail and free phone. The CS domain connects to PSTN/ISDN net- 
works. The CS domain is expected to evolve from the existing 2G GSM 
PLMN. 

The PS domain deals with PS services. Some examples of PS services are 
Internet access and multimedia services. Since Internet connectivity is provided, 
all services currently available on the Internet such as search engines and e-mail 
are available to mobile users. The PS domain connects to IP networks. The PS 
domain is expected to evolve from the GPRS PLMN. 

The I, circuit-switched and packet-switched protocol architecture are shown 
in Figures 15.24 and 15.25. 

The control plane protocol stack consists of RANAP on the top of sig- 
naling system 7 (SS7) protocols. The protocol layers are the signaling connec- 
tion control part (SCCP), the message transfer part (MTP3-B), and signaling 
asynchronous transfer mode (ATM) adaptation layer for network-to-network 
interface (SAAL-NNI). The SAAL-NNI is divided into service-specific coordina- 
tion function (SSCF), the service-specific connection-oriented protocol (SSCOP), 
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Figure 15.24 PS protocol architecture on /, interface. 


and ATM adaptation layer 5 (AALS) layers. The SSCF and SSCOP layers are 
specifically designed for signaling transport in ATM networks, and take care of 
signaling connection management functions. AALS is used for segmenting the 


data to ATM cells. 


As an alternative, an IP-based signaling bearer is specified for the І, PS 
control plane. The IP-based signaling bearer consists of SS7-MTP3—user adap- 
tation layer (M3UA), simple control transmission protocol (SCTP), IP, and 
AALS. The SCTP layer is specifically designed for signaling transport on the 


Internet. 


The transport network control plane (TNCP) carries information for the 
control of transport network used within UCN. 
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Figure 15.25 CS protocol architecture on /, interface. 
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The user plane (UP) carries user voice and packet data information. AAL2 
is used for the following services: narrowband speech (e.g., EFR, AMR); unre- 
stricted digital information service (up to 64kbps, i.e., ISDN B channel); any low 
to average bit rate CS service (e.g., modem service to/from PSTN/ISDN). AALS 
is used for the following services: non-real-time PS data service (i.e., best effort 
packet access) and real-time PS data. 


lur Interface 
The connection between two RNCs (serving RNC (SRNC) and drift RNC 
(DRNC)) is the I, interface. It is used in soft handoff scenarios when different 
macro diversity streams of one communication are supported by Node Bs that 
belong to different RNCs. Communication between one RNC and one Node B of 
two different КМС are realized through the І, interface. Three different protocol 
planes are defined for it: 

* Radio network control plane (RNCP) 

* Transport network control plane (TNCP) 

* User plane (UP) 


The I„ interface is used to carry: 


* Information for the control of radio resources in the context of specific 
service request of one mobile on RNCP 


* Information for the control of the transport network used within UTRAN 
on TNCP 


* User voice and packet data information on UP 


The protocols used on this interface are: 


Radio access network application part (RANAP) 
DCH frame protocol (DCHFP) 

RACH frame protocol (RACHFP) 

FACH frame protocol (FACHFP) 

Access link control application part (ALCAP) 
Q.aal2 

Signaling connection control part (SCCP) 
Message transfer part 3-B (MTP3-B) 


Signaling ATM adaptation layer for network-to-network interface (SAAL- 
NNI) (SAAL-NNI is further divided into service specific coordination 
function for network to network interface (SSCF-NNI), service specific 
connection oriented protocol (SSCOP), and ATM adaptation layer 5 
(AALS)) 
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The bearer is AAL2. The protocol structure of the I„, interface is shown in 


Figure 15.26. 
Initially, this interface was designed to support the inter-RNC soft handoff, 


but more features were added during the development of the standard. The I, 
provides the following four functions: 


1. Basic inter-RNC mobility support 


Support of SRNC relocation 
Support of inter-RNC cell and UTRAN registration area update 
Support of inter-RNC packet paging 


Reporting of protocol errors 


Radio Network Transport Network User Plane 
Control Plane Control Plane 


Control Plane 
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Figure 15.26 Protocol structure of /,, interface. 
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2. Dedicated channel traffic support 

* Establishment, modification, and release of a dedicated channel in the 
DRNC due to hard and soft handoff in the dedicated channel state 

e Setup and release of dedicated transport connections across the I,,, interface 

* Transfer of DCH transport blocks between SRNC and DRNC 


* Management of radio links in the DRNS via dedicated measurement report 
procedures and power setting procedures 


3. Common channel traffic support 
e Setup and release of the transport connection across the I,, for common 
channel data streams 


* Splitting of the MAC layer between the SRNC (MAC-d) and DRNC 
(MAC-c and MAC-sh); the scheduling for downlink data transmission is 
performed in the DRNC 


• Flow control between the MAC-d and MAC-c/MAC-sh 


4. Global resource management support 


e Transfer of cell measurements between two RNCs 
* Transfer of Node B timing between two RNCs 


lup Interface 
The connection between the RNC and Node В is the I,; interface. There is one Lp 
interface for each Node B. The I„p interface is used for all of the communications 
between Node B and the RNC of the same RNS. Three different protocol planes 
are defined for it. 

* Radio network control plane (RNCP) 

* Transport network control plane (TNCP) 

* User plane (UD) 


The I„p interface is used to carry: 


* [nformation for the general control of Node B for radio network operation 
on RNCP 


* Information for the control of radio resources in the context of specific 
service request of one mobile on RNCP 


* [nformation for the control of a transport network used within UTRAN 
on TCNP 


* User CC and MM signaling message on RNCP 
* User voice and packet data information on UP 
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The protocols used on this interface include: 


Node B application part protocol (NBAP) 
DCH frame protocol (DCHFP) 

RACH frame protocol (RACHFP) 

FACH frame protocol (FACHFP) 

Access link control application part (ALCAP) 
Q.aal2 

SSCP or TCP and IP 

MTP3-B 

SAAL-UNI (SSCF-UNI, SSCOP, and AALS) 


When using multiple low-speed links in the I„p interface, Node B supports 


inverse multiplexing for ATM (IMA). 


The bearer is AAL2. The protocol structure for the interface I„p is shown in 


Figure 15.27. 


U, Interface 

The UMTS U, interface is the radio interface between a Node В and one of 
its UE. The U, is the interface through which UE accesses the fixed part of the 
system. 


15.7. 


2 Distribution of UTRAN Functions 


Located in the RNC 


Radio resource control (L3 Function) 

Radio link control (RLC) 

Macro diversity combining 

Active cell set modification 

Assign transport format combination set (centralized data base function) 


Multiplexing/demultiplexing of higher layer PDUs into/from transport 
block delivered to/from the physical layer on shared dedicated transport 
channels (used for soft handover) 

L1 function: macro diversity distribution/combining (centralized multipoint 
termination) 

Selection of the appropriate transport format for each transport channel 
depending upon the instantaneous source rate—collocate with RRC 


Priority handling between data flows of one user 
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Figure 15.27 Protocol structure of lup interface. 


Located in Node B 


* Scheduling of broadcast, paging, and notification messages; location in 
Node В — to reduce data repetition over I,,, and reduce RNC CPU load and 
memory space 

* Collision resolution on RACH (in Node B—to reduce nonconstructive 
traffic over I„p interface and reduce round trip delay) 

* Multiplexing/demultiplexing of higher layer PDUs to/from transport blocks 
delivered to/from the physical layer on common transport channels 
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15.8 UMTS Core Network Architecture 
Figure 15.28 shows the UMTS core network (UCN) in relation to all other entities 
within the UMTS network and all of the interfaces to the associated networks. 
The UCN consists of a CS entity for providing voice and CS data services 
and a PS entity for providing packet-based services. The logical architecture offers 
a clear separation between the CS domain and PS domain. The CS domain con- 
tains the functional entities: mobile switching center (MSC) and gateway MSC 
(GMSC) (see Figure 15.28). The PS domain comprises the functional entities: serv- 
ing GPRS support node (SGSN), gateway GPRS support node (GGSN), domain 
name server (DNS), dynamic host configuration protocol (DHCP) server, packet 
charging gateway, and firewalls. The core network can be split into the following 
different functional areas: 


* Functional entities needed to support PS services (e.g. 3G-SGSN, 3G-GGSN) 

* Functional entities needed to support CS services (e.g. 3G-MSC/VLR) 

* Functional entities common to both types of services (e.g. 3G-HLR) 
Other areas that can be considered part of the core network include: 

* Network management systems (billing and provisioning, service manage- 
ment, element management, etc.) 

* IN system (service control point (SCP), service signaling point (SSP), etc.) 

e ATM/SDH/IP switch/transport infrastructure 


Figure 15.29 shows all the entities thatconnectto the core network — UTRAN, 


PSTN, the Internet and the logical connections between terminal equipment (MS, 
UE), and the PSTN/Internet. 


UMTS Core Network Gp G5 Go 


INAP, CAMEL 


Packet Data 
Network 


Figure 15.28 UMTS core network architecture. 
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DHCP: dynamic host configuration protocol 


Figure 15.29 Logical architecture of the UMTS core network. 
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15.8.1 3G-MSC 

The 3G-MSC is the main CN element to provide CS services. The 3G-MSC also 
provides the necessary control and corresponding signaling interfaces including 
SS7, MAP, ISUP (ISDN user part), etc. The 3G MSC provides the interconnec- 
tion to external networks like PSTN and ISDN. The following functionality is 
provided by the 3G-MSC: 


Mobility management: Handles attach, authentication, updates to the HLR, 
SRNS relocation, and intersystems handover. 


Call management: Handles call set-up messages from/to the UE. 


Supplementary services: Handles call-related supplementary services such 
as call waiting, etc. 


CS data services: The IWF provides rate adaptation and message translation 
for circuit mode data services, such as fax. 

* Vocoding 

SS7, MAP and RANAP interfaces: The 3G-MSC is able to complete originat- 
ing or terminating calls in the network in interaction with other entities of 
a mobile network, e.g., HLR, AUC (Authentication center). It also controls/ 
communicates with RNC using RANAP which may use the services of SS7. 

ATM/AAL2 Connection to UTRAN for transportation of user plane traffic 
across the І, interface. Higher rate CS data rates may be supported using a 
different adaptation layer. 


Short message services (SMS): This functionality allows the user to send 
and receive SMS data to and from the SMS-GMSC/SMS-IWMSC (Inter 
working MSC). 

VLR functionality: The VLR is a database that may be located within the 
3G-MSC and can serve as intermediate storage for subscriber data in order 
to support subscriber mobility. 


IN and CAMEL. 
OAM (operation, administration, and maintenance) agent functionality. 


15.8.2 3G-SGSN 
The 3G-SGSN is the main CN element for PS services. The 3G-SGSN provides 
the necessary control functionality both toward the UE and the 3G-GGSN. It also 
provides the appropriate signaling and data interfaces including connection to 
an IP-based network toward the 3G-GGSN, SS7 toward the HLR/EIR/AUC and 
TCP/IP or SS7 toward the UTRAN. 

The 3G-SGSN provides the following functions: 


* Session management: Handles session set-up messages from/to the UE and 
the GGSN and operates Admission Control and QoS mechanisms. 


15.8. 
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I, and G, MAP interface: The 3G-SGSN is able to complete originating or 
terminating sessions in the network by interaction with other entities of a 
mobile network, e.g., GGSN, HLR, AUC. It also controls/communicates 
with UTRAN using RANAP. 


ATM/AALS physical connection to the UTRAN for transportation of user 
data plane traffic across the І, interface using GPRS tunneling protocol 
(GTP). 

Connection across the G, interface toward the GGSN for transportation of 
user plane traffic using GTP. Note that no physical transport layer is defined 
for this interface. 


SMS: This functionality allows the user to send and receive SMS data to and 
from the SMS-GMSC /SMS-IWMSC. 


Mobility management: Handles attach, authentication, updates to the HLR 
and SRNS relocation, and intersystem handover. 


Subscriber database functionality: This database (similar to the VLR) is 
located within the 3G-SGSN and serves as intermediate storage for subscriber 
data to support subscriber mobility. 


Charging: The SGSN collects charging information related to radio network 
usage by the user. 


OAM agent functionality. 


3 3G-GGSN 


The GGSN provides interworking with the external PS network. It is connected 


with 


SGSN via an IP-based network. The GGSN may optionally support an SS7 


interface with the HLR to handle mobile terminated packet sessions. 


The 3G-GGSN provides the following functions: 
Maintain information locations at SGSN level (macro-mobility) 


Gateway between UMTS packet network and external data networks 
(e.g. IP, X.25) 


Gateway-specific access methods to intranet (e.g. PPP termination) 
Initiate mobile terminate Route Mobile Terminated packets 


User data screening/security can include subscription based, user controlled, 
or network controlled screening. 

User level address allocation: The GGSN may have to allocate (depending 
on subscription) a dynamic address to the UE upon PDP context activation. 
This functionality may be carried out by use of the DHCP function. 
Charging: The GGSN collects charging information related to external data 
network usage by the user. 


OAM functionality 
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15.8.4 SMS-GMSC/SMS-IWMSC 

The overall requirement for these two nodes is to handle the SMS from point to 
point. The functionality required can be split into two parts. The SMS-GMSC is 
an MSC capable of receiving a terminated short message from a service center, 
interrogating an HLR for routing information and SMS information, and deliver- 
ing the short message to the SGSN of the recipient UE. The SMS-GMSC provides 
the following functions: 


* Reception of short message packet data unit (PDU) 
* Interrogation of HLR for routing information 


* Forwarding of the short message PDU to the MSC or SGSN using the 
routing information 


The SMS-IWMSC is an MSC capable of receiving an originating short 
message from within the PLMN and submitting it to the recipient service center. 
The SMS-IWMSC provides the following functions: 


* Reception of the short message PDU from either the 3G-SGSN or 
3G-MSC 


* Establishing a link with the addressed service center 
* Transferring the short message PDU to the service center 


Note: The service center is a function that is responsible for relaying, storing, 
and forwarding a short message. The service center is not part of UCN, although 
the MSC and the service center may be integrated. 


15.8.5 Firewall 

This entity is used to protect the service providers’ backbone data networks from 
attack from external packet data networks. The security of the backbone data 
network can be ensured by applying packet filtering mechanisms based on access 
control lists or any other methods deemed suitable. 


15.8.6 DNS/DHCP 
The DNS server is used, as in any IP network, to translate host names into 
IP addresses, i.e., logical names are handled instead of raw IP addresses. Also, 
the DNS server is used to translate the access point name (APN) into the GGSN 
IP address. It may optionally be used to allow the UE to use logical names 
instead of physical IP addresses. 

A dynamic host configuration protocol server is used to manage the alloca- 
tion of IP configuration information by automatically assigning IP addresses to 
systems configured to use DHCP. 
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15.9 Adaptive Multi-Rate Codec for UMTS 

The adaptive multi-rate (AMR) codec is the new codec that will be used in 
UMTS and GSM. The AMR codec has eight source rates; 4.75, 5.15, 5.90, 6.70 
(PDC-EFR), 7.40 (15-641), 7.95 (VSELP), 10.2 and 12.2 kbps (GSM-EFR). The 
AMR codec rates are controlled by a radio access network and do not depend 
on speech activity as in the cdma2000. During high cell loading, such as during 
busy hours, the AMR codec uses lower bit rates to offer higher capacity while 
providing slightly lower speech quality. Also, if a mobile is running out of the cell 
coverage area and using maximum transmission power, a lower AMR bit rate is 
used to extend the cell coverage area. With the AMR speech codec, it is possible 
to achieve a trade-off between capacity, coverage, and speech quality as per the 
service provider’s requirements. The AMR speech codec is capable of switching 
the bit rate at every 20-ms frame upon command. 

The AMR codec operates on speech frames of 20 ms corresponding to 160 
samples at the sampling rate of 8000 samples per second. The AMR uses algebraic 
code excited linear prediction (ACELP) coding. At every 160 speech samples, the 
speech signal is analyzed to determine the parameters of the CELP model (i.e., LP 
filter coefficients, adaptive and fixed codebooks' indices and gains). The speech 
parameter bits delivered by the speech encoder are rearranged according to their 
subjective importance before sending them to the network. The rearranged bits 
are further classified into class Ia, Ib, and II bits based on their sensitivity to 
errors. Class Ia is the most sensitive; the strongest channel coding is applied to 
class Ia bits. The AMR codec uses the following functions to provide discontinu- 
ous transmission (DTx) activity: 


* Voice activity detector (VAD) on the transmission (Tx) side 


* Background acoustic noise evaluation on the Tx side to transmit character- 
istic parameters to the receive (Rx) side 


* Comfort noise information transmission to the Rx side through regular use 
of the silence descriptor (STD) frame 


* Comfort noise generation on the Rx side during periods when no normal 
speech frames are received 


DTx prolongs terminal battery life and reduces the average required bit rate, 
providing a lower interference and an increase in system capacity. The AMR also 
deals with error concealment. The purpose of frame substitution is to conceal the 
effect of the lost speech frames. The purpose of muting the output in the case of 
several lost frames is to indicate the breakdown of the channel to the user and to 
avoid generating possibly annoying sounds as a result of the frame substitution 
procedure. The AMR speech codec can tolerate about 1% frame error rate (FER) 
(about a bit error rate of 107“) of class Ia bits without any deterioration of speech 
quality. For class Ib and class II bits, a higher FER is allowed. 
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15.10 UMTS Bearer Service 


Network services are end-to-end, i.e., from terminal equipment (TE) to another 
TE. An end-to-end service has a certain QoS provided to the user by the network. 
To realize a certain network QoS, a bearer service with well-defined characteristics 
and functionality must be set up from the source to the destination of the service. 
UMTS bearer service layered architecture is shown in Figure 15.30. Each bearer 
service on layer N offers its service by using the services provided by (N — 1) 
layers below. 

The traffic passes through different services of the network on its way from 
one piece of TE to another TE (see Figure 15.31). The end-to-end service used by 
the TE is realized by using a combination of TE/MT local bearer service, a UMTS 
bearer service and an external bearer service. We focus only on the bearer service 
that provides the UMTS QoS. 

The UMTS bearer service has two parts: the radio access bearer (RAB) ser- 
vice and the core network bearer (CNB) service. Both these services are aimed 
at optimizing the UMTS bearer service over the respective wireless network 
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Figure 15.30 UMTS bearer service layered architecture. 
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topology by taking into consideration aspects such as mobility and mobility 
subscriber profiles. 

The RAB service provides a secured transport of signaling and user data 
between the MT and CN I, edge node with QoS adequate to the negotiated 
UMTS bearer service with default QoS for signaling. The RAB service is based on 
the characteristics of the radio interface and is maintained for a moving mobile 
terminal (MT). This service is realized by a radio bearer service and an І, bearer 
service. 

To support unequal error protection, UTRAN and MT have the ability to 
segment/reassemble the user flows into different subflows requested by the RAB 
service. The segmentation/reassemble is provided by the service data unit (SDU) 
payload format signaled at the RAB establishment. The radio bearer service han- 
dles the part of the user flow belonging to one subflow, according to the reliability 
requirements for that subflow. The І, bearer service for packet traffic provides a 
different bearer service for a variety of QoS. 

The core network bearer service of the CN connects the CN І, edge node 
with the CN gateway to the external network. The role of this service is to effec- 
tively control and use the backbone network to provide the contracted UMTS 
bearer service. The UMTS packet CN supports different backbone bearer services 
for different QoS. 

The CN bearer service uses a generic network service. The backbone net- 
work service covers the layer 1/layer 2 functionality and is selected according to 
the service provider’s choice to satisfy the QoS requirements of the CN bearer 
service. 


15.11 QoS Management 


UMTS allows a user/application to negotiate bearer parameters that are most 
appropriate to carry the information. During an active session, it is possible to 
change bearer properties using a bearer renegotiation procedure. Bearer negotia- 
tion is initiated by an application, whereas renegotiation may be initiated either 
by the application or by the network. An application-initiated renegotiation is 
similar to a negotiation procedure that occurs in the bearer establishment phase. 
The application requests a bearer depending on its needs, the network checks 
the available resources and the user’s service class subscription to respond. The 
user either accepts or rejects the offer. The bearer class, bearer parameters, and 
parameter values are directly related to an application as well as to the networks 
that lie between the sender and the receiver. 


15.11.1 Functions for UMTS Bearer Service in the Control Plane 
Control plane QoS management functions support the establishment and modifi- 
cation of a UMTS bearer service by signaling/negotiation with the UMTS external 
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services and by the establishment or modification of all UMTS internal services 
with the required characteristics. The control plane QoS management functions 
include: 


* The service manager coordinates the functions of the control plane for 
establishing, modifying, and maintaining the service. It provides all user- 
plane QoS management functions with the relevant attributes. 


* The translation function performs a conversion between UMTS bearer ser- 
vice attributes and QoS parameters of the external networks service control 
protocol. 


* Admission/capability control maintains information about all available 
resources of a network entity and about all resources allocated to UMTS 
bearer services. It determines for each UMTS bearer service request whether 
the required resources can be provided by this entity. It reserves the resources 
if allocated to the UMTS bearer service. 


* Subscription control checks the administrative rights of the UMTS bearer 
service user to use the requested service with the specified QoS attributes. 


15.11.2 Functions for UMTS Bearer Service in the User Plane 

The user plane QoS management function maintains the signaling and user data 
traffic within certain limits, defined by specific QoS attributes. UMTS bearer ser- 
vice with different QoS values are supported by the QoS management functions. 
These functions ensure the provision of the QoS negotiated for a UMTS bearer 
service and include: 


* The mapping function provides each data unit with the specific marking 
required to receive the intended QoS at the transfer by a bearer service. 


* The classification function assigns data units to the established service 
of an MT according to the related QoS attributes if the MT has multiple 
UMTS bearer services established. The appropriate UMTS bearer ser- 
vice is derived from the data unit header or from traffic characteristics 
of data. 


* The resource manager distributes the available resources between all services 
sharing the same resources. The resource manager distributes the resources 
according to the required QoS. 


* The traffic conditioner provides conformance between the negotiated QoS 
for a service and the data unit traffic. Policing or traffic shaping performs 
traffic conditioning. The policing function compares the data unit traffic 
with the related QoS attributes. The traffic shape forms the data unit traffic 
according to the QoS of the service. 
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15.12 Quality of Service in UMTS 


The QoS in the UMTS network must take into account the restrictions and 
limitations of the air interface. In CDMA systems, all users use the same band- 
width at the same time and, therefore, users interfere with one another. Because 
of the propagation mechanism, the signal received by the base station from a user 
close to the base station will be stronger than the signal received from another 
user located at the cell boundary. Hence, the close users will dominate the distant 
users. This situation becomes much worse if the close user happens to be a high- 
speed data user. To achieve considerable capacity and QoS, all signals should 
arrive at the base station with the same mean power, irrespective of distance. 
A solution to this problem is precise power control, which attempts to achieve 
constant mean power for each user. The UTRA/WCDMA air interface uses power 
control on both uplink and downlink at 1500 Hz. 


15.12.1 QoS Classes 

The QoS mechanisms for the wireless network must be robust and capable of 
providing reasonable QoS resolution. UMTS defines four different QoS classes. 
These are conversational class, streaming class, interactive class, and background 
class. The main distinguishing factor between these classes is how delay sensitive 
the traffic is. The conversational class is meant for traffic, which is very delay sen- 
sitive, whereas the background class is the most delay insensitive traffic class. 

The conversational and streaming classes are mostly used to carry real-time 
traffic flows. The main difference between them is based on how delay sensitive 
the traffic is. The conversational real-time services, such as video telephony and 
speech are the most delay sensitive applications. They require data streams to be 
carried in conversational class. 

The interactive class and background class are mainly used for traditional 
applications such as www, e-mail, Telnet, FTP, and news. Due to less stringent 
delay requirements compared to the conversational and streaming classes, both 
classes provide a better error rate by means of channel coding and retransmission. 
The main difference between the interactive and background class is that the inter- 
active class is mainly used for interactive applications (e.g., e-mail or interactive 
web browsing), and the background class is meant for background traffic (e.g., 
background of e-mails or to background the downloading). Separating interac- 
tive and background applications ensure response for the interactive applications 
and background applications. Traffic in the interactive class has a higher priority 
in scheduling than the background class traffic. The background applications use 
transmission resources only when interactive applications do not need them. 


15.12.2 QoS Attributes 
The defined UMTS bearer attributes ranges and radio access bearer attributes ranges 
and their relationship for each bearer class is summarized in Tables 15.8 and 15.9. 
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Table 15.8 UMTS bearer attributes for each bearer class. 


Traffic class 


Maximum bit rate 
(kbps) 


Delivery order 


Maximum SDU 
size (octets) 


SDU format 
information 


SDU error ratio 


Residual bit error 
ratio 


Delivery of 
erroneous SDUs 


Transfer delay 
(ms) 


Guaranteed bit 
rate (kbps) 


Traffic handling 
priority 


Conversational 


class 


<2000 


Yes/No 
<1500 


1072, 10-3, 1074 


1075 

5*10-2, 1072, 
1073, 1074 
Yes/No 


100, maximum 


«2000 


Table 15.9 Radio access bearer attributes for each bearer class. 


Traffic class 
Maximum bit rate 
(kbps) 

Delivery order 


Maximum SDU size 
(octets) 


SDU format 
information 


SDU error ratio 


Residual bit error 
ratio 


Delivery of 
erroneous SDUs 


Conversational 
class 


«2000 


Yes/No 
«1500 


(1) 


10-2, 1073, 10-4 
1075 


5*10-2, 1072, 
1073, 1074 
Yes/No 


529 
Background 
Streaming class Interactive class class 
«2000 «2000 «2000 
overhead overhead 
Yes/No Yes/No Yes/No 
«1500 «1500 «1500 
(1) (1) 
10-2, 1073, 107^ 10-3, 10-4 10-5 1073, 1074 1075 
1075 
10-2, 1073, 1074, 4*1073, 10-5, 4*1073, 1075, 
1075 6*1078 6*1078 
Yes/No Yes/No Yes/No 
500, maximum 
<2000 
TBD 
Background 
Streaming class Interactive class class 
<2000 <2000 <2000 
overhead overhead 
Yes/No Yes/No Yes/No 
<1500 <1500 <1500 
(1) (1) (1) 
10-2, 1073, 1074 1073, 1074 1075 1073, 1074 
1075 1075 
5*1072, 1072, 4*1073, 1075, 4*1073, 
10 3,10 ^10 5  6*1078 1075, 6*1078 
Yes/No Yes/No Yes/No 


(Continued) 
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Table 15.9 Radio access bearer attributes for each bearer class. (continued) 


Conversational Background 
Traffic class class Streaming class Interactive class class 
Transfer delay (ms) 80, maximum 500, maximum 
Guaranteed bit rate «2000 «2000 
(kbps) 
Traffic handling TBD 
priority 


Note: (1) Definition of possible values of exact SDU sizes for which UTRAN can support transparent 
RLC protocol mode. 


15.13 High-Speed Downlink Packet Access (HSDPA) 


In third-generation partnership project (3GPP) standards, Release 4 specifications 
provide efficient IP support enabling provision of services through an all-IP core 
network (see Figures 15.32 and 15.33). Release 5 specifications focus on HSDPA 
to provide data rates up to approximately 8-10 Mbps to support packet-based 
multimedia services. Multi input and multi output (MIMO) systems are the work 
item in Release 6 specifications, which will support even higher data transmission 
rates of up to 20 Mbps. HSDPA is evolved from and backward compatible with 
Release 99 WCDMA systems. 

HSDPA is based on the same set of technologies as high data rate (HDR) 
to improve spectral efficiency for data services— such as shared downlink packet 
data channel and high peak data rates— using high-order modulation and adap- 
tive modulation and coding, hybrid ARQ (HARQ) retransmission schemes, fast 
scheduling and shorter frame sizes. 

HSDPA marks a similar boost for WCDMA that EDGE does for GSM. It 
provides a two-fold increase in air interface capacity and a five-fold increase in 
data speeds in the downlink direction. HSDPA also shortens the round-trip time 
between the network and terminals and reduces variance in downlink transmis- 
sion delay. The improvements in performance are achieved by: 


* Bringing some key functions, such as scheduling of data packet transmis- 
sion and processing of retransmissions (in case of transmission errors) into 
the base station — that is, closer to the air interface. 


* Using a short frame length to further accelerate packet scheduling for 
transmission. 


* Employing incremental redundancy for minimizing the air-interface load 
caused by retransmissions. 
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Figure 15.32 A simplified all-IP UMTS architecture. 
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* Adopting a new transport channel type, known as high-speed downlink 
shared channel (HS-DSCH) to facilitate air interface channel sharing 
between several users. 


* Adapting the modulation and coding scheme according to the quality of the 
radio link 


The primary objective behind HSDPA is to provide a cost-effective, high- 
bandwidth, low-delay, packet-oriented service within UMTS. Backward compati- 
bility is critical, so the HSDPA architecture adheres to an evolutionary philosophy. 
From an architectural perspective, HSDPA is a straightforward enhancement 
of the UMTS Release '99 (R99) architecture, with the addition of a repetition/ 
scheduling entity within the Node B that resides below the R99 media-access con- 
trol (MAC) layer. From a cellular-network perspective, all R99 techniques can be 
supported in a network supporting HSDPA, since HSDPA mobile terminals (UEs) 
are designed to coexist with R99 UEs. HSDPA is particularly suited to extremely 
asymmetrical data services, which require significantly higher data rates for the 
transmission from the network to the UE, than they do for the transmission from 
the UE to the network. 

HSDPA introduces enablers for the high-speed transmission at the physical 
layer like the use of a shorter transmission time interval (TTI) (2 ms), and the use 
of adaptive modulation and coding. HS-DPCCH is used to carry the acknowledg- 
ment signals to Node B for each block. It is also used to indicate channel qual- 
ity (СОП) used for adaptive modulation and coding. HS-DSCH uses 2 ms ТТІ to 
reduce trip time, to increase the granularity in the scheduling process, and to track 
the time varying radio channel better. 

The basic operational principles behind HSDPA are relatively simple. The 
RNC routes data packets destined for a particular UE to the appropriate Node B. 
Node B takes the data packets and schedules their transmission to the mobile 
terminal over the air interface by matching the user's priority and estimated chan- 
nel operating environment with an appropriately chosen coding and modulation 
scheme (that is, 16-QAM vs. QPSK). 

The UE is responsible for acknowledging receipt of the data packet and pro- 
viding Node B with information regarding channel condition, power control, and 
so on. Once it sends the data packet to the UE, Node B waits for an acknowledg- 
ment. If it does not receive one within a prescribed time, it assumes that the data 
packet was lost and retransmits it. 

HSDPA continuously strives, with some modest constraints, to give the 
maximal bandwidth to the user with the best channel conditions. The data rates 
achievable with HSDPA are more than adequate for supporting multimedia- 
streaming services (refer to Table 15.10). 

Although conceptually simple, HSDPA's implementation within the context 
of a Node B does raise some architectural issues for the designer. In a typical 
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Table 15.10 HSDPA data rates. 


Chip rate = 3.84 Mcps, frame size = 3 slots 


Throughput with Throughput with Throughput with 


Modulation Coding rate 5 codes 10 codes 15 codes 
16-OAM 1/2 2.4Mbps 4.8Mbps 7.2Mbps 
16-OAM 3/4 3.6 Mbps 7.2Mbps 10.8 Mbps 
16-OAM 4/4 4.8 Mbps 9.6 Mbps 14.4Mbps 
QPSK 1/4 600 kbps 1.2 Mbps 1.8 Mbps 
QPSK 1/2 1.2 Mbps 2.4 Mbps 3.6 Mbps 
QPSK 3/4 1.8 Mbps 3.6 Mbps 5.4 Mbps 


network deployment, the Node B radio cabinet sits in proximity to the radio 
tower and the power cabinet. For indoor deployments the radio cabinet may be 
a simple rack, while in outdoor deployments it may be an environmental-control 
unit. The guts of the radio cabinet are an antenna interface section (filters, power 
amplifiers, and the like), core processing chassis (RF transceivers, combiner, high- 
performance channel cards, network interface and system controller card, timing 
card, back-plane, and so on), plus mechatronics (power supply, fans, cables, etc.) 
and other miscellaneous elements. The core processing chassis is the cornerstone 
of Node B and bears most of the cost. It contains the RF transceiver, combiner, 
network interface and system controller, timing card, channel card and back- 
plane. Of the core processing chassis elements, only the channel card needs to be 
modified to support HSDPA. 

The typical UMTS channel card comprises a general-purpose processor that 
handles the miscellaneous control tasks, a pool of digital signal processor (DSP) 
resources to handle symbol-rate processing and chip-rate assist functions, and a 
pool of specialized ASIC (application specific intergrated circuit) devices to handle 
intensive chip-rate operations such as spreading, scrambling, modulation, rake 
receiving, and preamble detection. 

To support HSDPA, two changes must be made to the channel card. First, 
the downlink chip-rate ASIC must be modified to support the new 16-QAM mod- 
ulation schemes and new downlink slot formats associated with HSDPA. In addi- 
tion, the downlink symbol-rate processing section must be modified to support 
HSDPA extensions. 

The next change requires a new processing section, called the MAC-h,, 
which must be added to the channel card to support the scheduling, buffer- 
ing, transmission, and retransmission of data blocks that are received from the 
RNC. This is the most intrusive augmentation to the channel card because it 
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requires the introduction of a programmable processing entity together with a 
retransmission buffer. 

Since the channel card already contains both a general-purpose processor and 
a DSP, one can make convincing arguments that the MAC-h, could be effectively 
realized using either of the two types of devices. Nonetheless, many designers 
are finding that, because of the close ties between the MAC-h, function and the 
lower-layer symbol and chip-rate functions, the DSP is the more practical choice. 
Simulations have shown that a retransmission buffer of approximately 2.5 Mbits 
in size is adequate to handle the buffering requirement of a standard cell with 75 
or so users. 

The new channels introduced in HSDPA are high-speed downlink shared 
channel (HS-DSCH), high-speed shared control channel (HS-SCCH), and high- 
speed dedicated physical control channel (HS-DPCCH). The HS-DSCH is the 
primary radio bearer. Its resources can be shared among all users in a particular 
sector. The primary channel multiplexing occurs in a time domain, where each 
TTI consists of three time slots (each 2 ms). ТТІ is also referred to as a sub-frame. 
Within each 2ms TTI, a constant spreading factor (SF) of 16 is used for code 
multiplexing, with a maximum of 15 parallel codes allocated to HS-DSCH. Codes 
may all be assigned to one user, or may be split across several users. The number 
of codes allocated to each user depends on cell loading, QoS requirements, and 
UE code capabilities (5, 10, or 15 codes). 

The HS-SCCH (a fixed rate 960 kbps, SF = 128) is used to carry downlink 
signaling between Node B and UE before the beginning of each scheduled TTI. 
It includes UE identity, HARQ-related information and the parameters of the 
HS-DSCH transport format selected by the link-adaptation mechanism. Multiple 
HS-SCCHs can be configured in each sector to support parallel HS-DSCH trans- 
missions. A UE can be allocated a set of up to four HS-SCCHs, which need to be 
monitored continuously. 

The HS-DPCCH (SF = 256) carries ACK/NACK signaling to indicate whether 
the corresponding downlink transmission was successfully decoded, as well as a 
channel quality indicator (CQI) to be used for the purpose of link adaptation. 
The CQI is based on a common pilot channel (CPICH) and is used to estimate the 
transport block size, modulation type, and number of channelization codes that 
can be supported at a given reliability level in downlink transmission. The feed- 
back cycle of СОЇ can be set as a network parameter in predefined steps of 2 ms. 

UE capabilities include the maximum number of HS-DSCHs supported 
simultaneously (5, 10, or 15), minimum TTI time (minimum time between the 
beginning of two consecutive transmissions to the UE), the maximum number 
of HS-DSCH transport block (TB) bits received within an HS-DSCH TTI, the 
maximum number of soft channel bits over all HARQ and supported modulations 
(QPSK only or both QPSK and 16-QAM). Table 15.11 gives UE categories. 
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Table 15.11 HSDPA UE categories. 


TB size Total soft Data rate 
Category Codes Inter-TTI (bits) bits Modulation (Mbps) 
1 5 3 7300 19,200 OPSK/OAM 1.2 
2 5 3 7300 28,800 OPSK/OAM 1.2 
3 5 2 7300 28,800 OPSK/OAM 1.8 
4 5 2 7300 38,400 OPSK/OAM 1.8 
5 5 1 7300 57,600 OPSK/OAM 3.6 
6 5 1 7300 67,200 OPSK/OAM 3.6 
7 10 1 14,600 115,200 OPSK/OAM 7.2 
8 10 1 14,600 134,400 OPSK/OAM 7.2 
9 15 1 20,432 172,800 OPSK/OAM 10.2 
10 15 1 28,776 172,800 OPSK/OAM 14.4 
11 5 2 3650 14,400 OPSK 0.9 
12 5 1 3650 OPSK 1.8 


15.14 Freedom of Mobile multimedia Access (FOMA) 


The NTT DoCoMo's FOMA (Freedom Of Mobile multimedia Access) service in 
Japan, offers a revolutionary third-generation (3G) mobile communications plat- 
form. The advanced new service provides voice transmission quality on a par with 
fixed-line communications, with minimal interference and noise, and supports 
diverse multimedia content. Based on the WCDMA system, FOMA is providing 
the dramatic evolution of i-mode, other web-connection services, and innovative 
data-rich applications. FOMA supports full-motion video image transmission, 
music and game distribution, and other high-speed, large-capacity data commu- 
nications. The service also offers roaming in various countries around the world. 

With packet data transfer speeds of 64 to 384 kbps, FOMA service supports a 
variety of applications including Internet access, e-mail, file transfer, remote login, 
and Internet phone applications. Also available are ISDN-type services that func- 
tion on a streamed basis, effectively using n X 64 kbps channels and supporting 
applications such as telephony, video-conferencing, and Group 4 fax. High-quality 
voice services at up to 12.2 kbps are also supported. 

NTT DoCoMo’s 3G network utilizes ATM technology that manages packet 
switching and circuit switching on the same network node, enabling use of vari- 
ous traffic types for true multimedia connectivity. Also supported is the use of 
asymmetric communications with differing characteristics for the uplink and 
downlink, possible because ATM can handle these resources separately. More- 
over, ATM makes possible flexible connection services and both point-to-point 
and point-to-multipoint connections. 
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Through 3G technologies, the IN provides quicker response to customer 
needs. Development costs are also more easily controlled and lowered, and global 
roaming (virtual home environment) becomes a practical possibility. 

FOMA’s ability to smoothly and flexibly handle a wide range of high-quality 
content, including sound, still images, and video images, owes much to two key 
technologies employed in WCDMA: 


* Spread spectrum technology transmits radio signals over a wider frequency 
band than that used by conventional mobile phone systems. 


* Multirate technology selects the most suitable communication speed and 
transmission channel for data based on its type and size. 


In addition to introducing sophisticated new terminal functions and further 
expanding its service area, МТТ DoCoMo’s future plans include the reduction 
of terminal weight to less than 100g and the extension of terminal battery life to 
more than 300 hours. Dual terminals compatible with both GSM and FOMA net- 
works will be launched, with full-scale global roaming service. This dual network 
service will allow subscribers to use their mobile phones all over the world, and 
use of a variety of video-based services in areas supporting WCDMA. To accel- 
erate the expansion of the FOMA user base in Japan, with a priority on indoor 
coverage in public areas and population centers, МТТ DoCoMo aims to extend 
coverage to 99% of the populated areas of Japan. 

Within the next several years, the FOMA system will allow anyone with a 
cellular phone to retrieve vital business and personal information from anywhere 
around the world. Company personnel will be able to conduct video conferencing 
with branch offices and business partners, and send/receive customer and sales 
data while on the move. 

Various models also allow the transmission and display of still and moving 
images, while e-mail with attached images and movie files, video distribution, 
and videophone capabilities are also made possible through advanced multimedia 
technologies such as MPEG4. All models offer the ability to download software 
through a highly advanced and secure implementation of Java technology, all offer 
access to the popular i-mode service, and all are compatible with PCs and PDAs. 


15.15 Summary 

In this chapter we discussed the wide-area wireless systems used in Europe and 
Japan. We presented the evolution path for GSM. We discussed the architecture 
of the UMTS including its domains and interfaces. We outlined the channel struc- 
ture in the UTRAN. The channel structure in the UTRAN is a three-tier system 
which includes logical, transport, and physical channels. A detail description of 
the control, transport, and user plane in the I,, In, Inb interfaces was provided. 
The role of each network entity in UMTS was presented. We discussed the UMTS 
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bearer services and UMTS QoS. We concluded the chapter by discussing the 
high-speed downlink packet access (HSDPA) service. 


Problems 
15.1 Discuss two evolution paths for the GSM to offer 3G services. 
15.2 What is the high-speed circuit switched data (HSCSD) in the GSM? 
15.3 What is the role of the general packet radio service (GPRS) in the GSM? 
15.4 Define roles of two new network entities in the GPRS. 
15.5 Name the physical channels of the GPRS and discuss their functions. 
15.6 What are some of the point-to-point (РТР) and point-to-multipoint 
(PTM) applications of the GPRS? 
15.7 How are higher data rates achieved in the enhanced data rates for GSM 
enhancement (EDGE)? Discuss. 
15.8 What are the modulation and coding schemes that are used for the packet 
mode in the EDGE? 
15.9 Discuss the roles of 3G systems. 
15.10 What is the UMTS? List important features of the UMTS air interface. 
15.11 What are three channel types that are used in the UMTS? Discuss the 
role of each channel type. 
15.12 How is isolation between users in the downlink accomplished in a 
WCDMA system? 
15.13 What are the three main entities of the UMTS network? Discuss their 
functions. 
15.14 Discuss the responsibilities of the RNC in the UMTS network. 
15.15 What are the responsibilities of Node B in the UMTS network? 
15.16 Discuss the role of the access link control application part (ALCAP) in 
the UMTS. 
15.17 Discuss I,, L,,, and Г,ь interfaces in the UMTS. 
15.18 The соге network of the UMTS is divided into three different functional 
areas. Name these areas and discuss their roles. 
15.19 What is adaptive multi-rate (AMR) codec? 
15.20 Discuss the UMTS bearer service layered architecture. 
15.21 What are the QoS classes in the UMTS? 
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15.22 Discuss QoS attributes used in the UMTS. 
15.23 Discuss briefly HSDPA for WCDMA. 
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CHAPTER 16 


Wide-Area Wireless 
Networks — cdmaOne Evolution 


16.1 Introduction 

While the primary objective of 2G networks was to provide mobile circuit-switched 
voice and low rate data services, a key goal of the evolution to 3G networks was 
the introduction of connectivity to packet data networks via cellular systems while 
at the same time increasing voice capacity. 

Early definitions of 3G systems sought to boost the gross bit rates over radio, 
and to introduce support for quality of service (QoS) classes to improve packet 
switched bearer services. As demand for both greater capacity and more packet 
data services has grown, the industry has sought to improve 3G data throughput 
while at the same time enhancing voice performance over the same RF carrier. The 
cdma2000 1X EV-DV technology was developed to meet requirements and is first 
included in IS-2000 Revision C. 

The cdma2000 radio transmission technology (RTT) is a wideband, spread 
spectrum radio interface that uses CDMA (IS-95) technology to satisfy the needs 
of 3G wireless communication systems. The RTT meets all requirements specified 
in the ITU circular letter and the corresponding documents of the IMT-2000. The 
service requirements are satisfied for indoor office, indoor-to-outdoor/pedestrian, 
and vehicular environments. The cdma2000 system is backward compatible with 
the current cdmaOne (IS-95) family of standards. cdmaOne is the family of stan- 
dards of CDMA technology consisting of IS-95, IS-95A (J-STD-008) and IS-95B. 
The cdma2000 is a resultant system that evolves from 2G IS-95, satisfying the 
requirement of the IMT-2000 system with input from RTT 1X/3X submitted by 
the TR 45.5 subcommittee of TR 45 of the TIA to the ITU. IS-856 supports high- 
speed packet data services up to 2 Mbps. This is also referred to as high data rate 
(HDR) or 3G1X EV-DO (evolution for data-only systems). The development of 
the 3G1 X EV-DV (evolution for data and voice) system has been completed іп 
3GPP2. Figure 16.1 shows the evolution of IS-95. Figure 16.2 gives the cdma2000 
evolution path [1-9]. 

The cdma2000 system provides a wide range of implementation options to 
support data rates (both circuit switched and packet switched) starting from a 
TIA/EIA-95B compatible rate of 9.6 kbps up to greater than 2 Mbps. The cdma2000 
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cdma2000 


15-2000 (1X/3X RTT) 
1999 


IS-2000 A 
2000 


15-2000 B 


15-856 IS-XXX 


HDR (1X-EV-DO) 3G (1X-EV-DV) 


Figure 16.1 Evolution of IS-95. 


system provides maximum flexibility to carriers in making engineering trade-offs 
between: 


* Channel sizes of 1, 3, 6, 9, and 12 channels (each of 1.25 MHz) 
* Support for advanced antenna technologies 


e Cell sizes (e.g., the cdma2000 system's increased performance can be realized 
in terms of increased range to permit carriers to reduce the total number of 
cell sites) 


* Higher data rates that can be supported in all channel sizes 


* Support for advanced services possible or practical in other systems (e.g., high- 
speed circuit data, B-ISDN, or H.224/223 teleservices) 


The cdma2000 system can be operated economically in a wide range of envi- 
ronments including outdoor megacells (cell > 35 km radius), outdoor macrocells 
(cell 1-35 km radius), indoor/outdoor microcells (up to 1 km radius), and indoor/ 
outdoor picocells («50 m radius). 

The cdma2000 system can be deployed in indoor/outdoor environments, 
wireless local loops (WLL), vehicular environments, and mixed vehicular and 
indoor/outdoor environments. 
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Figure 16.2 cdma2000 evolution path. 


The cdma2000 system mobility is variable, ranging from fixed wireless to 
high speeds of up to 300mph. cdma2000 provides a layered structure to support 
the integration of the bottom two layers of the radio transmission technology 
(RTT) into systems that implement any network standards (e.g., ITU-T defined 
signaling services). It also provides backward compatibility to TIA/EIA-95B sig- 
naling and call control models. An extended cdma2000 upper layer signaling 
structure is capable of supporting a wide range of advanced services (e.g., multi- 
media) in an optimized and efficient manner. 

cdma2000 supports the 3G wireless intelligent networking (WIN) services 
and services defined by the ITU or other international standards organizations 
and provides a graceful evolution from existing 2G TIA/EIA-95B technology. It 
includes the support for overlay configurations, support for backward compat- 
ibility to TIA/EIA-95B signaling and network, support for a graceful and gradual 
upgrade from the 2G system to the 3G system, and sharing of common channels 
with an underlay TIA/EIA-95B system during transition periods. 

cdma2000 provides an evolutionary path by reusing existing TIA/EIA-95B 
standards including: 


* TIA/EIA-95-B: Mobile station and radio interface specifications 
* [S-707: Data services (packet, async, and fax) 
* [S-127: Enhanced variable rate codec (EVRC) 8 kbps speech coder 
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IS-733: 13 kbps speech coder 
IS 637: Short message service (SMS) 


* IS 638: Over-the-air-activation and parameter administration (supporting the 
configuration and service activation of mobile stations over the radio interface) 


IS 97 and 98 (minimum performance specifications) 
* The basic TIA/EIA-95B channel structure 


* Extensions to TIA/EIA-95B fundamental/supplemental channel structure, 
multiplex layer, and signaling to support higher rate operation, common 
broadcast channels (pilot, paging, and sync) 


* [S-634: No significant changes are expected for cdma2000; the layered 
structure of cdma2000 integrates smoothly with the component structure 
of IS-634 


* TIA/EIA-41D: No significant changes needed for the cdma2000; the layered 
structure of cdma2000 offers the potential for easy integration with enhanced 
network services (WIN). 


In Chapter 15, we discussed the evolution of GSM to UMTS/WCDMA 
(wideband code division multiple access). In this chapter, we focus on the evolu- 
tion of cdmaOne (see Chapter 11) to cdma2000. We provide typical end-to-end 
call flows for cdma2000 and the WCDMA system. We conclude the chapter by 
summarizing differences between cdma2000 and WCDMA. 


16.2 cdma2000 Layering Structure 


16.2.1 Upper Layer 
Figure 16.3 shows the layer structure of cdma2000. The upper layers open system 
interconnection (OSI layers 3-7) contain three basic services [10-13]: 


* Voice services. Voice telephony services, including public switched tele- 
phone network (PSTN) access, mobile-to-mobile voice services, and Internet 
telephony. 


* Enduser data-bearing services. Services that deliver any form of data on behalf 
of the mobile end user, including packet data (e.g., IP service), circuit-switched 
data services (e.g., B-ISDN emulation services), and SMS. Packet data ser- 
vices conform to industry standard connection-oriented and connectionless 
packet data including IP-based protocols (e.g., transmission control protocol 
(TCP) and user datagram protocol (UDP) and OSI connectionless interwork- 
ing protocol (CLIP)). Circuit-switched data services that emulate international 
standards-defined, connection-oriented services such as asynchronous (async) 
dial-up access, fax, V.120 rate-adapted ISDN, and B-ISDN services. 


* Signaling. Services that control all aspects of the operation of the mobile. 
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Figure 16.3 cdma2000 layering structure. 


16.2.2 Lower Layers 

The link layer provides varying levels of reliability and QoS characteristics according 
to the needs of the specific upper layer service. It gives protocol support and control 
mechanisms for data transport services and performs all functions necessary to map 
the data transport needs of the upper layers into specific capabilities and character- 
istics of the physical layer. The link layer is divided into two sublayers: link access 
control (LAC) and medium access control (MAC) (refer to Figure 16.4). 

The LAC sublayer manages point-to-point communication channels bet- 
ween peer upper layer entities and provides framework to support a wide range 
of different end-to-end reliable link layer protocols. 

The cdma2000 system includes a flexible and efficient MAC sublayer that 
supports multiple instances of an advanced-state machine, one for each active 
packet or circuit data instance. Together with a QoS control entity, the MAC 
sublayer realizes the complex multimedia, multiservice capabilities of 3G wire- 
less systems with QoS management capabilities for each active service. The MAC 
sublayer provides three important functions. 


* MAC control state. Procedures for controlling the access of data service 
(packet and circuit) to the physical layer (including contention control between 
multiple services from a single user as well as between competing users). 


* Best effort delivery. Reasonably reliable transmission over the radio link 
with radio link protocol (RLP) providing a best-effort level of reliability. 
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Figure 16.4 cdmaOne and cdma2000 layering structure. 


e Multiplexing and QoS control. Enforcement of negotiated QoS levels by 
mediating conflicting requests from competing services and appropriately 
prioritizing access requests. 


The MAC sublayer provides differing QoS to the LAC sublayer (e.g., different 
modes of operation). It may be constrained by backward compatibility (e.g., for 
IS-95B signaling layer 2) and it may have to be compatible with other link layer 
protocols (e.g., for compatibility with non-IS-95 air interfaces or for compatibility 
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with future ITU-defined protocol stacks). The MAC sublayer is subdivided into 
a physical layer independent convergence function (PLICF) and a physical layer 
dependent convergence function (PLDCF) that is further subdivided into instance- 
specific PLDCF and PLDCF MUX (multiplexing) and a QoS sublayer. 

The PLICF provides service to the LAC sublayer and includes all MAC oper- 
ational procedures and functions that are not unique to the physical layer. Each 
instance of PLICF maintains service status for the corresponding service. PLICF 
uses services provided by PLDCF to implement actual communications activities 
in support of MAC sublayer service. Services used by PLICF are defined as a set 
of logical channels that carry different types of control or data information. The 
PLICF data service consists of the following states/substates (see Figure 16.5). 


Active State 
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exchange Suspended State 
dtch is for more 
established than Томе; dmch 


Release is Sent established 


Service option 


connected; . Not exchanging 
Initialization State dimen come Not exchanging user data 
established Control Hold State data for more for more than 
than Troia Tsuspend 


Packet Packet 
service service PPP terminated; 
request deactivated release sent Release message 


is sent; PPP not 
terminated 


Service option Dormant State 


connected; 
nuit state) dmch_control 
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Has data to 
send 


Reconnect State 


PPP terminated; 
release sent 


SO: Service Option dtch: Dedicated Traffic Channel 
D SO connected dmch_control: Dedicated MAC Channel Control 
CL SO not connected РРР: Point-to-point Protocol 


Figure 16.5 Data services state diagram. 
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• Null state 

* [nitialization state 

* Control hold state 
* Normal substate 
* Slotted substate 

* Active state 

* Suspended state 
* Virtual traffic substate 
* Slotted substate 

* Dormant state 
* Dormant/idle substate 
* Dormant/burst substate 


The null state is considered to be a default state prior to the activation of 
the packet data service. After the packet service is invoked, a transition to the 
initialization state occurs during which an attempt is made to connect the packet 
service. 

Traffic, power control, and control channels are assigned in the active state. 
In the control hold state, a dedicated control channel is maintained between the 
user and the base station on which any MAC control command (for example, the 
command to begin a high-speed data burst) can be transmitted with virtually no 
latency. Power control is also maintained so that a high-speed burst operation can 
begin with no delay due to the stabilization of power control. 

In the suspended hold state, there are no dedicated channels maintained to 
or from the user. However, the state information for RLP is maintained, and the 
base station and user maintain a virtual active set that allows either one of them 
to know which base station can best be used (accessed by the user or paged by 
the base station) in the event that packet data traffic occurs for the user. This state 
also supports a slotted substate that permits the user's mobile device to preserve 
power in a highly efficient manner. 

A short data burst mode is added to the cdma2000 dormant state to support 
the delivery of short messages without incurring the overhead of a transition from 
a dormant state to the active state. Transitions between MAC states can be indi- 
cated by MAC control signaling or by the expiration of timers. By properly select- 
ing the values for the timers, the cdma2000 MAC can be adapted to a wide variety 
of data services and operating environments. 

The states are categorized as either connected or not connected, depending 
on the status of the data service option. The data service option is connected in the 
control hold state, active state, and suspended hold state. The data service option 
is not connected in the null state, initialization state, dormant state, or reconnect 
state. Figure 16.5 shows the state diagram for the PLICF data service option. 
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The PLDCF performs mapping of logical channels from the PLICF to logical 
channels supported by the specific physical layer. The PLDCF performs multiplex- 
ing, demultiplexing, and consolidation of control information with bearer data 
from the control and traffic channels from multiple PLICF instances in the same 
mobile. The PLDCF implements QoS capabilities, including resolution of priorities 
between competing PLICF instances, and maps QoS requests from PLICF instances 
into the appropriate physical layer service requests to deliver the desired QoS. The 
major functions of this sublayer are: 


* Perform any required mapping of the simpler logical channels from the 
PLICF into the logical channels supported by the physical layer. 


* Perform any (optional) automatic repeat request (ARQ) protocol functions 
that are tightly integrated with the physical layer. 


• Perform some of the physical layer specific low-level functions of IS-95B КІР. 
For cdma2000, four PLDCF specific protocols are defined. 


1. Radio link protocol (RLP). This protocol provides a highly efficient 
streaming service that makes a best effort to deliver data between peer 
PLICF entities. RLP provides both transparent and nontransparent modes 
of operation. In the nontransparent mode, RLP uses ARQ protocol to 
retransmit data segments that were not delivered properly by the physical 
layer. In the nontransparent mode, RLP can introduce some delay. In the 
transparent mode, RLP does not retransmit missing data segments. How- 
ever, RLP maintains byte synchronization between the sender and receiver 
and notifies the receiver of the missing parts of the data stream. Trans- 
parent RLP does not introduce any transmission delay, and is useful for 
implementing voice services over RLP. 


2. Radio burst protocol (RBP). This protocol provides a mechanism for 
delivering relatively short data segments with best-effort delivery over a 
shared access common traffic channel (CTCH). This capability is useful 
for delivering small amount of data without incurring the overhead of 
establishing a dedicated traffic channel (DTCH). 


3. Signaling radio link protocol (SRLP). This protocol provides a best-effort 
streaming service for signaling information analogous to RLP, but is 
optimized for the dedicated signaling channel (DSCH). 


4. Signaling radio burst protocol (SRBP). This protocol provides a mecha- 
nism to deliver signaling messages with best-effort delivery analogous to 
RBP, but is optimized for signaling information and a common signaling 
channel (CSCH). 


The PLDCF includes a radio link access control (RLAC) function that 
abstracts the RLP and RBP from the PLICF and coordinates the transmission 
of data (traffic or signaling) between the RLP and RBP according to the current 
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operational state of MAC (e.g., restrict the use of the RBP to cases in which the 
PLICF is in the packet data dormant state). 

The PLDCF MUX and QoS sublayer coordinates multiplexing and demul- 
tiplexing of code channels from multiple PLICF instances. It implements and 
enforces QoS differences between instances and maps the data streams and 
control information on multiple logical channels from different PLICF instances 
into requests for logical channels, resources, and control information from the 
physical layer. 


16.3 Forward Link Physical Channels of cdma2000 


Forward dedicated channels carry information between the base station and a 
specific mobile; common channels carry information from the base station to a 
set of mobiles in a point-to-multipoint manner (see Figures 16.6—16.8). Table 16.1 
lists these channels. 


Forward Link Reverse Link 


Dedicated Auxiliary Pilot (F-DAPICH)* 


Common Assignment (F-CACH)* 


Pilot (F-PICH) 


Pilot (R-PICH)* 


Paging (F-PCH) 


Sync (F-SYNC) Access (R-ACH) 


Fundamental (F-FCH) Dedicated Control (R-DCCH)* 


Supplementary (PS9) Fundamental (R-FCH) 


Quick Paging (F-QPCH)* F Base 


Вазе Station Supplementary (R-SCH)* 


Station | Supplementary Code (F-SCCH) 


Broadcast (F-BCH)* Supplementary Coded (SCCH) 


Common Power Control (F-CPCCH)* Common Control (R-CCCH)* 


Transmit Diversity Pilot (F-TDPICH)* 


Auxiliary Transmit Diversity Pilot Enhanced Access (R-EACH) 


(F-ATDPICH)* 


Common Control (F-CCCH)* 


Dedicated Control (F-DCCH)* 


* New to cdma2000 


Figure 16.6 cdma2000 physical channels. 
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Figure 16.7 cdma2000 overview of dedicated physical channels (DPHCH). 
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Forward Common Diversity Pilot Channel* 


Forward Common Pilot Channel 


Forward Auxiliary Diversity Pilot Channel* 


Forward Auxiliary Pilot Channel* 


Forward 


Forward 
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Reverse 


Reverse 


Reverse 
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Common Control Channel* 
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Figure 16.8 cdma2000 overview of common physical channels (CPHCH). 


Table 16.1 Forward link channels of cdma2000. 


Physical channel 


Channel name 


F-PICH 


Forward Pilot Channel 


Forward Common Physical 
Channels (control and over- 
head channels) 


Forward Paging Channel 


Forward Synch Channel 


Forward Common Control 


Channel 


F-PCH 
F-SYNCH 
F-CCCH 


Forward Quick Paging Channel 


Forward Transmit Diversity 
Pilot Channel 


Forward Auxiliary Transmit 
Diversity Pilot Channel 


Forward Common Power 
Control Channel 


F-OPCH 
F-TDPICH 


F-ATDPICH 


F-CPCCH 


(Continued) 
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Physical channel Channel name 

Forward Common Assign- F-CACH 

ment Channel 

Forward Broadcast Channel F-BCH 
Forward Dedicated Physical Forward Dedicated Auxiliary F-DAPICH 
Channels Pilot Channel 

Forward Dedicated Control F-DCCH 

Channel 


Forward Traffic 


-Fundamental F-FCH 
-Supplementary F-SCH 
-Supplementary Coded F-SCCH 


16.4 Forward Link Features 

The forward link supports chip rates of N X 1.2288 Mcps (where N = 1, 3, 6, 9, 12). 
For N = 1, the spreading is similar to IS-95 B; however, QPSK modulation and fast 
closed loop power control are used. For chip rates with N > 1 the multicarrier (see 
Figure 16.9) option is used. The multicarrier approach demultiplexes modulation 
symbols onto N separate 1.25 MHz carriers (N = 3, 6, 9, 12). Each carrier is spread 
with 1.2288 Mcps rate. There are nine radio configurations for the forward traffic 
channels. Table 16.2 provide the details. 


16.4.1 Transmit Diversity 
Transmit diversity can reduce the required E,/No (or required transmit power per 
channel) and thus enhance the system capacity. Transmit diversity can be imple- 
mented in the following ways: 


* Multi-carrier transmit diversity. Antenna diversity can be implemented in a 

multicarrier forward link with no impact on the subscriber terminal, where 

a subset of carriers is transmitted on each antenna. The main characteristics 

of a multicarrier approach are 

* Coded information symbols are demultiplexed among multiple 1.25 MHz 
carriers. 

* Frequency diversity is equivalent to spreading the signal over the entire 
bandwidth. 

* Both time and frequency diversity are captured by convolutional coder/ 
symbol repetition and interleaver. 


* The rake receiver captures signal energy from all bands. 


* Each forward link channel may be allocated an identical Walsh code on 
all carriers. 


* Fast power control is used. 
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Figure 16.9 Mlulti-carrier approach in cdma2000. 


Table 16.2 Forward traffic channel spreading for different radio configurations. 


Radio configuration 


RC1 


RC2 


RC3 


RC4 


RC5 


RC6 


RC7 


RC8 


RC9 


Spreading rate 


IS-95B compatible 


IS-95B compatible 


3G1X, SR-1 


3G1X, SR-1 


3G1X, SR-1 


3G3X, SR-3 


3G3X, SR-3 


3G3X, SR-3 


3G3X , SR-3 


Rate, modulation, coding, and 
diversity 


Based оп RS1 (9.6 kbps), coding 
rate (r) = 1/2, BPSK 
prespreading symbols. 


Based on RS2 (14.4kbps), 
coding rate (r) = 1/2, BPSK 
prespreading symbols. 


1.5-153.6 kbps with r= 1/4, 
QPSK prespreading symbols, 
orthogonal transmit diversity 
(OTD) allowed. 


1.5-307.2 kbps with r= 1/4, 
QPSK prespreading symbols, 
OTD allowed. 


1.8-230.4kbps with r= 1/2, 
QPSK prespreading symbols, 
OTD allowed. 


1.5-307.2 kbps with r= 1/6, 
OPSK prespreading symbols, 
multicarriers (MC) modes, 
OTD allowed. 


1.5-614.4kbps with r — 1/6, 
OPSK prespreading symbols, 
MC modes, OTD allowed. 


1.8-460.8 kbps with r — 1/4, 

(20 ms frame) or r= 1/3 

(bms frame), OPSK prespreading 
symbols, MC modes, OTD allowed. 


1.8-1036.8 kbps with r — 1/2, 

(20 ms frame) or r= 1/3 

(bms frame), OPSK prespreading 
symbols, MC modes, OTD allowed. 
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In a 3X 1.25 MHz multicarrier transmitter, the serial coded information 
symbols are divided into three parallel data streams, and each data stream is 
spread with a Walsh code and a long pseudo-random noise (PN) sequence at a 
rate of 1.2288 Mcps. At the output of the transmitter, there are three carriers: 
A, B, and C (see Figure 16.10). 

After processing the serial coded information symbols with parallel carriers, 
the multicarrier will be transmitted by a multi-antenna, called multi-carrier trans- 
mit diversity (MCTD). In the MCTD, the total carriers are divided into subsets, 
then each subset of the carriers is transmitted on each antenna, where frequency 
filtering provides near-perfect orthogonality between antennas. This provides 
improved frequency diversity and hence increases forward link capacity. 


* Direct-spread transmit diversity. Orthogonal transmit diversity (OTD) may 
be used to provide transmit diversity for direct spread (N — 1). Coded bits 
are split into two data streams and are transmitted via separate antennas. 
A different orthogonal code is used per antenna for spreading. This main- 
tains the orthogonality between the two output streams, and hence self- 
interference is eliminated in flat fading. Note that by splitting the coded bits 
into two separate streams, the effective number of spreading codes per user 
is the same as the case without OTD. An auxiliary pilot is introduced for the 
additional antenna. 


16.4.2 Orthogonal Modulation 
To reduce or eliminate intracell interference, each forward link physical channel 
is modulated by a Walsh code. To increase the number of usable Walsh codes, 
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Figure 16.10 3X1.25MHz multi-carrier transmitter. 
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quadrature phase shift keying (QPSK) modulation is used before spreading. Every 
two information bits are mapped to a QPSK symbol. As a result, the available num- 
ber of Walsh codes is increased by a factor of two, relative to binary phase shift key- 
ing (BPSK) (prespreading) symbols. Walsh code length varies to achieve different 
information bit rates. The forward link may be interference limited or Walsh code 
limited depending on the specific deployment and operating environment. When a 
Walsh code limit occurs, additional codes may be generated by multiplying Walsh 
codes by the masking functions. The codes generated in this way are called quasi- 
orthogonal functions. The quasi-orthogonal functions are not totally orthogonal. 


16.4.3 Power Control 

In IS-95, forward link power control was not considered to be as important and 
demanding as the one required by the reverse link power control. This was sup- 
ported by the argument that the base station (BS) transmits all the channels coher- 
ently in the same RF carrier, and they all fade together as the composite signal 
arrives at the mobile. This argument is valid as long as the thermal and background 
noise is negligible. For this reason the initial IS-95A forward power control require- 
ments were not as stringent as the ones for the reverse link. However, a particular 
mobile may be near a significant source of interference, or may suffer a large path 
loss such that the arriving composite signal is of the order of the background noise. 
For this reason, a faster power control is also required on the forward link. 

In IS-95, the forward link power control is slow and is performed at a rate not 
faster than 50Hz. Its implementation depends on the rate set of the traffic channel. 
For RS1 the mobile collects the frame error rate (FER) and reports statistics to the 
BS, which compares the FER to a target value. The BS increases or decreases the 
forward link power depending on whether the FER is higher or lower than the tar- 
get FER. Typically, the BS receives an FER measurement message once every one 
hundred frames, and takes action every two seconds on average, thus providing a 
forward power control that runs at a rate of about 0.5 Hz for RS1. 

For RS2 the mobile sends an erasure indicator bit (EIB) to the BS in every 
frame, indicating the quality of the frame received previously by the mobile. The BS 
uses the EIB to estimate the forward link FER and increases or decreases the forward 
link traffic channel power depending on the relationship of the FER estimated to the 
FER target value. The RS2 power control runs at a rate of 50Hz, which represents 
a performance improvement over its predecessor algorithm used in the RS1. 

Although there are substantial performance improvements in the forward 
link power control when updating the RS1 algorithm with the RS2 algorithm, the 
performance is still limited by the inability to cope with fast Rayleigh fading and 
fast changing RF conditions. The main reason for this is the slow rate at which 
the forward link power control operates. Therefore, to improve the performance 
(i.e., to lower the BS average transmit power per voice channel) and to increase 
the forward link call capacity, a faster power control loop is required to mitigate 
fast Rayleigh fading. 


16.4 Forward Link Features 557 


The 3G forward link power control functions are similar to the reverse link 
power control in IS-95. The algorithm consists of two loops running at an effec- 
tive rate of 800 Hz. This enhancement is expected to increase the user capacity of 
the forward link. 

The forward link power control in 3G is fundamentally different from IS-95. 
Its main objective is to increase the voice call capacity in the forward link by a 
series of new enhancements, including: 


* High speed forward power control 
* Closed loop with fast time response 
* Variable power step size controlled by the BS 


The forward link power control operates at a high rate to track and com- 
pensate accurately the fast Rayleigh fading on the forward link. The accurate 
tracking minimizes the average power transmitted by the BS to the mobile and, as 
a consequence, increases the forward link call capacity. 

The rate of the forward link power control is increased by replacing the slow 
FER-based algorithm of 15-95 with a closed loop based on Ej/N; measurements 
similar to the reverse link in IS-95. While the IS-95 procedure of FER statistics is 
a slow process with a response time of many frames, the E/N; measurements are 
fast and easy to perform at a subframe interval. This allows the 3G forward link 
power control to operate at high speed. 

The increase in forward link capacity is expected mostly for mobiles 
moving at low speed and in simplex mode (i.e., not in soft handoff) where 
fast Rayleigh fading can be substantial and can be mitigated effectively. For 
mobiles travelling at high speed, the fast power control cannot track the fast 
Rayleigh fading accurately, and, therefore, a large increase in capacity may not 
be expected. In addition, the capacity increase for mobiles in soft handoff is 
less due to the already existing path diversity of soft handoff, which reduces 
Rayleigh fading. 

The variable power step size has not been standardized in IS-2000, and 
therefore the BS has the flexibility to adapt the step size depending on the speed of 
the mobile and soft handoff status of the call. This adaptability permits minimiza- 
tion of the peak to average power ratio, and decreases the overall interference, 
which increases the forward link capacity. 

The new fast forward power control (FFPC) algorithm on the forward link 
and power control for the F-FCH and F-SCH is used in cdma2000. The standards 
specify a fast closed loop power control at 800Hz. Two schemes of power control 
for the F-FCH and F-SCH have been proposed. 


* Single channel power control. This is based on the performance of the 
higher rate channel between the F-FCH and F-SCH. The gain setting for the 
lower rate channel is specific deployment and operating environment. When 
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a Walsh code limit occurs, additional codes may be generated by multiplying 
Walsh codes by the masking function. 


* Independent power control. In this case, gains for the F-FCH and F-SCH 
are determined separately. The mobile runs two separate outer loop algo- 
rithms (with different E,/N; targets) and sends two forward error bits to 
the BS. 


16.4.4 Walsh Code Administration 

IS-95 A/B uses fixed length 64-chip Walsh codes. The new rate sets in cdma2000 
require variable length Walsh codes for traffic channels. The Walsh codes used 
are from 128 chips to 2 chips in length. The F-FCH Walsh code is fixed (128 chips 
for RS3 and RS5, and 64 chips for RS4 and RS6), whereas the length of the 
Walsh codes for F-SCH decreases as the information rate increases to maintain a 
constant bandwidth of the modulated signal. In addition to different Walsh code 
lengths, the coordination of the allocation of Walsh codes across 2G and 3G 
systems is necessary for overlay systems. 

The algorithm must ensure that Walsh codes assigned for different rate 
supplemental channels are always orthogonal to each other as well as to the 
fundamental traffic channels, paging channels, synch channel, and pilot channel. 
For example, if an all Os 4-chip Walsh code (0 0 0 0) is assigned, then there are 
two 8-chip Walsh codes that are not to be assigned at the same time (000000 
00,000011 1 1); the remaining six 8-chip codes can be used since they are all 
orthogonal to it. By induction, four 16-chip, eight 32-chip, sixteen 64-chip, and 
thirty-two 128-chip codes must also be set aside to maintain orthogonality. 

The 2G and 3G Walsh code assignments must be coordinated to ensure that 
assigning the longer-length codes does not block out all of the shorter codes. 


16.4.5 Modulation and Spreading 
The SR1 system can be deployed in a new spectrum or as a backward-compatible 
upgrade anywhere an IS-95B forward link is deployed in the same RF channel. The 
new cdma2000 channels can coexist in an orthogonal manner with the code chan- 
nels of the existing IS-95B system. The SR1 spreading is shown in Figure 16.11. First, 
the user data is scrambled by the user-long PN code followed by I and Q mapping, 
channel gain, power control puncturing, and Walsh spreading. The power control 
bits may or may not be punctured onto the forward link depending on the specific 
logical-to-physical channel mapping. Next, as shown in Figure 16.11, the signal is a 
complex PN spread, followed by baseband filtering and frequency modulation. 
The multicarrier system can be deployed in a new spectrum or as a backward- 
compatible upgrade anywhere an IS-95B forward link is deployed in the same N 
RF channels. The new cdma2000 channels can coexist in an orthogonal manner 
with the code channels of the existing IS-95B system. 


Deploy in new spectrum or as a backward compatible upgrade of cdmaOne 
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Figure 16.11 SR1 PN spreading, baseband filtering, and frequency modulation. 
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The overall structure of the multicarrier CDMA channel is shown in 
Figure 16.12. After scrambling with the long PN code corresponding to user 77, 
the user data is demultiplexed into N carriers, where N — 3, 6, 9, or 12. On 
each carrier, the demultiplexed bits are mapped onto I and Q followed by Walsh 
spreading. When applicable, power control bits, for reverse closed loop power 
control, may be punctured onto the forward link channel at a rate of 800 Hz. The 
signal on each carrier is orthogonally spread by the appropriate Walsh code func- 
tion in such a manner as to maintain a fixed chip rate of 1.2288 Mcps per carrier, 
where the Walsh code may differ on each carrier. The signal on each carrier is 
then a complex PN spread (see Figure 16.11) followed by baseband filtering, and 
frequency modulation. 

Figure 16.13 provides a comparison between the forward physical channels 
used in IS-95 A/B and cdma2000. 

The key characteristics of the forward link are summarized as follows: 


Channels are orthogonal and use Walsh codes. Different-length Walsh codes 
are used to achieve the same chip rate for different information bit rates. 


QPSK modulation is used before spreading to increase the number of usable 
Walsh codes. 


Forward error correction (FEC) is used: 


• Convolutional codes (А = 9) are used for voice and data 
* Turbo codes (k = 4) are used for high data rates on SCHs 
Supports nonorthogonal forward link channelization 


* These are used when running out of orthogonal space (insufficient number 
of Walsh codes) 


* Quasi-orthogonal functions are generated by masking existing Walsh functions 


Synchronous forward link 


Forward link transmit diversity 


Fast-forward-power-control (closed loop) 800 times per second 


Supplemental channel active set, subset of fundamental channel active set. The 
maximum data rate supported for RS3 and RSS for a supplemental channel 
is 153.6kbps (raw data rate). RS4 and RS6 will be supported only for voice 
calls with the fundamental channel rates up to 14.4 kbps (raw data rate). 


Frame lengths 
* 20-ms frames are used for signaling and user information 


e 5-ms frames are used for control information 
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Figure 16.12 Multicarrier cdma2000 forward link structure. 
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Forward Link Channels 


F-SCCH 


=a New Channels 
=z Common to IS-95 & cdma2000 


Figure 16.13 A comparison between forward physical channels for IS-95 and cdma2000. 


16.5 Reverse Link Physical Channels of cdma2000 

Reverse link physical channels (see Figure 16.6) include dedicated channels to 
carry information from a single mobile to the base station and common channels 
to carry information from multiple mobiles to the base station. Table 16.3 lists the 
reverse physical channels. 

There are six radio configurations for the reverse traffic channels. A mobile 
station supports the operation in RC1, RC3, or RCS, and it may support the 
operation in RC2, RC4, or RC6. A mobile station supporting the operation in 
RC2 supports RC1, while a mobile station supporting the operation in КСА sup- 
ports RC3, and a mobile station supporting the operation in RC6 supports RCS. 
A mobile station does not use RC1 or RC2 simultaneously with RC3 or RC4 on 
the reverse traffic channels (see Table 16.4). 

Figure 16.14 provides a comparison between the reverse physical channels used 
in IS-95 A/B and cdma2000. Reverse link physical layer characteristics are as follows: 


* Continuous waveform. A continuous pilot and continuous data-channel 
waveform are used for all data rates. This continuous waveform minimizes 
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Table 16.3 Reverse physical channels of cdma2000. 


Reverse Common Physical 
Channel 


Reverse Dedicated Physical 
Channel 


Physical channels 


Reverse Access Channel 


Reverse Enhanced Access 
Channel 


Reverse Common Control 
Channel (9.6 kbps only) 


Reverse Pilot Channel 


Reverse Dedicated Control 
Channel 


Reverse Traffic Channel 
-Fundamental 
-Supplemental 
-Supplemental Code 
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Channel name 


R-ACH 


R-EACH 


R-CCCH 


R-PICH 


R-DCCH 


R-FCH 
R-SCH 
R-SCCH 


Table 16.4 Reverse traffic channel spreading for various radio configurations. 


Radio configuration 


RC1 


RC2 


RC3 


RC4 


RC5 


RC6 


Spreading rate 


IS-95B Compatible 


15-95В Compatible 


3G1X, SR1 


3G1X, SR1 


3G3X, SR3 


3G3X, SR3 


Rate, coding, modulation, and 
vocoder 


Based on RS1 (9.6 kbps), 
coding rate (r) = 1/3, 64-ary 
orthogonal, 8kbps vocoder 


Based on RS2 (14.4kbps), 
coding rate (r) = 1/2, 64-ary 
orthogonal, 8kbps vocoder 


1.2-153.6 kbps, r= 1/4, 
307.2kbps with r= 1/2 BPSK 
modulation with a pilot, 8kbps 
vocoder 


1.8-230.4 kbps with г = 1/4 


BPSK modulation with pilot, 
8kbps vocoder 


1.2-153.6kbps, r= 1/4, 
307.2kbps with r= 1/3 BPSK 
modulation with a pilot, 8kbps 
vocoder 


1.8-460.8 kbps with r= 1/4, 
1.0368 Mbps with r = 1/2 BPSK 
modulation with a pilot, 8kbps 
vocoder 
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Figure 16.14 A comparison between reverse physical channels for IS-95 and cdma2000. 


interference to biomedical devices such as hearing aids and pacemakers and 
permits a range increase at lower transmission rates. The continuous wave- 
form also enables the interleaving to be performed over the entire frame 
rather than just the portions that are not gated off. This enables the inter- 
leaving to achieve the full benefit of the frame time diversity. The base station 
uses the pilot for multipath searches, tracking, coherent demodulation as 
well as to measure the quality of the link for power-control purposes. Sepa- 
rate orthogonal channels for the pilot and each of the data channels are 
used. Thus, the relative levels of the pilot and physical data channels can 
easily be adjusted without changing the frame structure or power levels of 
some symbols of a frame. 


Orthogonal spreading with different length Walsh sequences. The mobile 
uses orthogonal spreading when transmitting on the R-PICH, EACH, 
R-CCCH, or R-TCH with RC3 through RC6. Table 16.5 specifies the 
Walsh functions that are applied to the reverse link channels. 


WM represents a Walsh function of length N that is serially constructed from 


the m-row of an N X N Hadamard matrix with the Oth row being Walsh func- 
tion 0, the first row being Walsh function 1, etc. Within Walsh function m, Walsh 


16.5 


Reverse Link Physical Channels of cdma2000 565 


Table 16.5 Walsh function for reverse link channels. 


Channel type Walsh function 
R-PICH w?? 
EACH ws 
R-CCCH we 
R-DCCH w36 
R-FCH wie 
R-SCH1 W? ог W3 
R-SCH2 W3 or W8 


chips are transmitted serially from the mth row left to right. The Walsh function 
spreading sequence repeats with a period of N/1.2288 us for SR1 and with a 
period of N/3.6864 us for SR3. 


Rate matching. Several approaches are needed to match the data rates 
to the Walsh spreader input rates. These include adjusting the code rate 
using puncturing, symbol repetition, and sequence repetition. The design 
approach is to first try to use a low rate code, but not to reduce the rate 
below r = 1/4 since gains of smaller rates would be small and the decoder 
implementation complexity would increase significantly. 


Low spectral sidelobes. The cdma2000 system achieves low spectral side- 
lobes with nonideal mobile power amplifiers by splitting the physical channels 
into the I and Q channels and using a complex-multiply-type PN spreading 
approach. 


Independent data channels. Two types of physical data channels (R-FCH 
and R-SCH) are used on the reverse link that can be adapted to a particu- 
lar type of service. The use of R-FCH and R-SCH enables the system to be 
optimized for multiple simultaneous services. These channels are separately 
coded and interleaved and may have different transmit power level and FER 
set points. 


16.5.1 Reverse Link Power Control 

The primary objective of power control in the reverse link is to resolve the 
near-far problem, where mobiles that are near the BS have a better signal path 
than mobiles that are far away. Due to this effect, near mobiles can, in principle, 
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raise the RF interference levels that screen out mobiles located far from the BS. 
This problem is resolved by controlling the reverse transmit power of each mobile, 
and requiring that the signal-to-noise ratio (SNR) of each mobile is the same at 
the BS. The reverse power control must be dynamic in order to compensate for 
the time-dependent variations of the RF environment. In IS-95, the reverse power 
control has been designed to solve the following reverse link problems. 


1. Choosing the initial mobile transmit power 


2. Power compensation due to slow varying and lognormal shadowing effects 
where there is a correlation between the forward and reverse link fades 


3. Measure and maintain a target SNR at the BS for each mobile 
4. Compensation of power fluctuation due to fast Rayleigh fading 


The first and second items are resolved using open loop power control. The 
third and fourth items are resolved using a closed loop, which consists of an inner 
and an outer loop nested together. 

In IS-95 the open loop power control is purely a mobile-controlled opera- 
tion and does not involve the BS. The mobile estimates the forward path loss, and 
based on this measurement determines the transmit power. Since forward and 
reverse links operate at different carrier frequencies, the open loop power con- 
trol is inadequate and too slow to compensate for fast and frequency-dependent 
Rayleigh fading. 

The closed loop power control is used to compensate fast Rayleigh fading. 
The process involves both the BS and the mobile station (MS). Once the MS is on 
the traffic channel, the open and closed loops work together so that the slower 
open loop is able to include the faster closed loop correction. 

The IS-2000 reverse power control scheme is a generalization of the IS-95 
version. The system supports the same open and closed loops, but it integrates the 
functionality of the power control of the fundamental and supplemental channels 
in a simple scheme—easy to expand. The key factor in the simplification is the 
introduction of the R-PICH, which is used as a reference for measurement and 
scaling in the open and inner loops, and then translates them to corrections that 
apply to F-FCH. The scaling is performed per channel and per data rate, so that 
rate equalization can be performed easily. This simplifies the design of the outer 
loop of the R-FCH, since all rates can be treated equally. 

In the reverse link open loop power control, the mobile estimates the 
transmitted power of the reverse link channels based on the measurement of the 
received aggregate power. As in IS-95, the open loop functionality is located at 
the mobile, however the BS must provide the value of the parameters the mobile 
needs to operate the open loop. This is done via a signaling message in the over- 
head channels and in the forward traffic channel. Open loop power control com- 
pensates for the path loss from the mobile to the base station and handles very 
slow fading. 
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IS-2000.2 provides formulas for the mean output power at the mobile of all 
the reverse channels. The formulas for the R-ACH and R-TCHs with RC1 and 
RC2 are identical to the ones in IS-95. Thus, the cell support of the open loop 
power control for R-ACH and R-FCH with RC1 апа RC2 is the same as the one 
used in 2G systems. 

The 3G reverse closed loop power control is based on the 2G model with 
two main components: the inner and outer loop. Although the main functionality 
of the 2G and 3G closed loop power control appears to be similar, the 3G closed 
loop has some differences. 

In 3G, the mobile transmits the R-FCH in continuous fashion for all sub- 
rates, while in 2G the reverse traffic channel is gated by the mobile depending on 
the subrate. In 2G, the mobile reduces the average power for subrate frames by 
gating off certain power control groups (PCGs) (8 for 1/2 rate, 12 for 1/4 rate, and 
14 for 1/8 rate). In this way the power level of a full rate frame for a nongated 
PCG is the same as a half, quarter, or one-eighth rate frame. The inner loop at the 
BS measures the reverse Ej/N, of the traffic channel for every PCG. For the gated 
PCGs the BS sends, most probably, power-up commands to the MS. Since the 
MS knows which are the gated PCGs, it ignores these commands. For nongated 
РСС, the BS measures the Ep/N; of the traffic channel, which is independent of 
the rate of the frame. 

In 3G, the reverse link transmission is continuous, and no PCG is gated. The 
mobile obtains a reduction in the average power of the subrate frames by repeat- 
ing the PCGs more times, and reducing the power per PCG, such that the energy 
received at the cell is rate independent. For this reason the inner loop cannot use 
the E/N; per PCG measurement of the R-FCH because it is rate dependent. Since 
the rate of the frame is known after decoding, the 3G inner loop cannot use the 
R-FCH measurement, and must use the R-PICH strength measurement. 

Continuous transmission provides several benefits to 3G power control. The 
3G inner loop operates at a genuine 800 Hz, whereas the 2G inner loop rate is 
lower depending on the subrate. For example, the 2G inner loop runs at 100 Hz 
for a 1/8 rate frame. In addition, the power variance of the R-FCH in 3G is reduced. 
These effects improve the coherent detection, and increase the reverse link call 
capacity. 

Since the inner loop power control uses R-PICH signal measurements, and 
the output of the R-FCH outer loop is the full rate Ej/N; set point for the R-FCH, 
the output of the R-FCH must be converted to reverse pilot strength units that can 
be used by the inner loop. 

The input to the reverse outer loop algorithm is the reverse frame errors 
detected by the BS in every frame. The output is the R-FCH E/N; set point at 
full rate, which is converted by the BS to the R-PICH SNR set point via offsets. 
The SNR set point value is mapped to an R-PICH energy threshold using a set of 
numerical tables. The SNR is compared to the R-PICH energy measurement in 
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determining if the reverse power control bit is to be sent to the mobile on forward 
power control subchannel. 
The key characteristics of the reverse link are summarized as follows: 
* Channels are primarily code multiplexed 
* Separate channels are used for different QoS and physical layer characteristics 
* Transmission is continuous to avoid EMI (Electro-magnetic interference) 


* Channels are orthogonalized by Walsh functions and I/Q split so that 
performance is equivalent to BPSK 


* Hybrid combination of QPSK and BPSK 
* Coherent reverse link with continuous pilot 
* Forward power control information is time-multiplexed with the pilot 


* By restricting alternate phase changes of the complex scrambling, power 
peaking is reduced and sidelobes are narrowed 


* [ndependent fundamental and supplemental channels with different transmit 
power and FER target 


* Forward error correction: 
• Convolutional codes (А = 9) are used for voice and data 


* Parallel turbo codes (k = 4) are used for high data rates on supplemental 
channels 


* Fast reverse power control: 800 times per second 
* Frame lengths 
* 20-ms frames are used for signaling and user information 


e 5-ms frames are used for control information 


16.6 Evolution of cdmaOne (15-95) to cdma2000 


With a high data rate, cdmaOne operators look for a host of new network capabil- 
ities enabling them to offer new value-added services that can exploit present and 
future generations of technology. With the Internet and corporate intranet becom- 
ing more essential to daily business activities, the rush is on to create the wireless 
office that can easily tie mobile workers to the enterprise. Further, there is great 
potential for push technologies that deliver news and other information directly to 
a wireless device. This could create entirely new revenue streams for operators. 
Although cdmaOne networks were not the first to offer data access, these net- 
works are uniquely designed to accommodate data. To start with, these networks 
handle data and voice transmissions in much the same way. cdmaOne's inherent 
variable rate transmission capability allows data rate determination to accom- 
modate the amount of information being sent, so system resources are used only 
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as needed. Because cdmaOne systems employ a packetized backbone for voice, 
packet data capabilities are already inherent in the equipment. cdmaOne packet 
data transmission technology uses a TCP/IP-compliant cellular digital packet data 
(CDPD) protocol stack to enable seamless connectivity with enterprise networks 
and to expedite third-party application development. 

Adding data to the cdmaOne network allows an operator to continue using 
its existing radios, back-haul facilities, infrastructure, and handsets while merely 
implementing a software upgrade with an interworking function. The upgrade 
to IS-95B allows for code or channel aggregation to provide data rates of 
64-115 kbps, as well as offering improvements in soft handoffs and interfre- 
quency hard handoffs. Equipment manufacturers have already announced IS-707 
packet data, circuit-switched data, and digital fax capabilities on its cdmaOne 
infrastructure equipment. 

Mobile IP, the proposed Internet standard for mobility, is an enhancement 
to basic packet data services. Mobile IP lets users maintain a continuous data 
connection and retain a single IP address while traveling between base station 
controllers (BSCs) or roaming on other CDMA networks. 

One of the key objectives of ITU IMT-2000 is the creation of standards to 
encourage a worldwide frequency band to promote a high degree of design com- 
monality and to support high-speed data services. IMT-2000 will utilize small pocket 
terminals, an expanded range of operation environments, and the deployment of an 
open architecture that allows the graceful introduction of newly created technology. 
Furthermore, 3G systems promise to deliver wireless voice services with wireline 
quality levels, along with the speed and capacity needed to support multimedia and 
high-speed data applications. Location-based services, on-board navigation, emer- 
gency assistance, and other advanced services will also be supported. 

The evolution of 3G will open the door of the WLL to the PSTN and public 
data network access, while providing more convenient control of applications and 
network resources. It will also provide global roaming, service portability, zone- 
based ID and billing, and global directory access. 3G technology is even expected 
to support seamless satellite interworking. 

One of the technical requirements for cdma2000 includes cdmaOne back- 
ward compatibility for voice services, vocoders, and signaling structure, as well as 
for privacy, authentication, and encryption capabilities. 

Phase one of the cdma2000 effort, also known as 3G1X, employs 1.25 MHz 
of bandwidth and delivers a peak data rate of 144 kbps for stationary or mobile 
applications. Phase two of cdma2000, called 3G3X, will use a 5 MHz bandwidth 
and is expected to deliver a peak data rate of 144 kbps for mobile and vehicular 
applications, and up to 2Mbps for fixed applications. Industry insiders predict 
that the 3G3X phase will eventually yield up to 1 Mbps for each traffic or Walsh 
channel. By aggregating or bundling two channels, users can achieve the 2 Mbps 
peak data rate targeted for IMT-2000. 
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The primary difference between phase one and phase two of cdma2000 
is bandwidth and resulting throughput speed, or peak data rate capability. 
Phase two will introduce advanced multimedia capabilities and lay the founda- 
tion for popular 3G voice services and vocoder, such as voice-over IP. Since the 
3G1X and 3G3X standards essentially share the same baseband radio elements, 
operators can take a major step toward full 3G capabilities by implementing 
3G1X. cdma2000 phase two will include detailed descriptions of signal protocols, 
data management, and expected upscale requirements for moving from 5-MHz to 
10- and 15-MHz radios in future interactions. 

By migrating from the current IS-95 CDMA air interface technology to 
3G1X of the cdma2000 standard, operators can achieve a two-fold increase in 
radio capacity and ability to handle up to 144 kbps of packet data. Phase one 
capabilities of cdma2000 include a new physical layer for 1X and 3X 1.25 MHz 
channel sizes; support for multicarrier forward link 3X options; and definitions 
for the 1X and 3X numerology. Operators also enjoy voice service enhancements 
that will produce two times the voice capacity. 

In the area of extended battery life, phase one employs a quick paging channel 
and gated transmission of 1/8 rate to produce gains of two times the battery lives 
currently available. Hard-handoff enhancements between 2G and 3G systems and 
power control enhancements are also the key factors in the improvements of voice 
service. 

Data services are also improved with the advent of cdma2000 phase one. 
Phase one features a MAC framework and packet data RLP definition to support 
packet data rates of at least 144 kbps. 

Implementation of cdma2000 phase two will bring a host of new capabili- 
ties and service enhancements. Phase two will support all channel sizes (6х, 9X 
and 12X) and associated numerology and a framework for advanced cdma2000 
3G voice services and vocoders— including voice-over IP. With phase two, true 
multimedia services will be available. To bring additional revenue opportunities 
for operators, multimedia services will be made possible through enhanced packet 
data MAC, full support for packet data services up to 2 Mbps, RLP support for all 
data rates up to 2Mbps, and the advanced multimedia call model. 

In the area of signaling and services, phase two cdma2000 will bring a native 
3G cdma2000 signaling structure to the LAC and upper layer signaling structure. 
This structure will provide support for enhanced privacy, authentication, and 
encryption functionality. An operator's existing architecture and network equip- 
ment can greatly affect the ease of this migration. A network built on an open, 
advanced architecture with a clear upward migration pathway can attain 3G1X 
capabilities with a simple modular upward movement of the H-band operation of 
the radio. Networks with a less flexible architecture may be required to take the 
more costly steps of replacing the entire BTS. To achieve the expected 144 kbps 
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peak data rate performance, operators can make software upgrades to networks 
and base stations to support 3G1X data protocol. 

Packet data service node (PDSN) will be required to support data connectivity to 
the Internet/intranet. Many equipment vendors already offer solutions that incorpo- 
rate PDSN elements, thus opening a smooth upward pathway to 3G technologies. 

The recent agreement between Qualcomm and Ericsson proposes three 
optional CDMA modes and eventual development of a global standard that is 
compatible with both ANSI IS-41 and GSM mobile application part (MAP). This 
approach envisions the use of multimode handsets and various market-driven solu- 
tions as the surest pathway to a unified CDMA 3G standard in the next generation 
of wireless communications. As subscribers demand greater wireless power and 
convenience, the migration to 3G technology will benefit operators by support- 
ing higher capabilities, lowering network costs, and increasing overall profitability. 
Figure 16.15 shows the timeline of cdmaOne evolution. 

cdmaOne operators will be able to upgrade to 3G without acquiring an 
additional spectrum, a key component to minimum time to market without addi- 
tional, significant investment. The design of cdma2000 allows for deployment of 
the 3G enhancements while maintaining existing 2G support for cdmaOne in the 
spectrum an operator has today. 

Both cdma2000 phase one and cdma2000 phase two can be intermingled 
with cdmaOne to maximize the effective use of the spectrum according to the 
needs of an individual operator's customer base. For example, an operator that has 
a strong demand for high-speed data service may choose to deploy a combination 
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Figure 16.15 cdmaOne evolution timeline. 
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of cdma2000 phase one and cdmaOne that uses more channels for cdma2000 
(see Figure 16.16). In another market, users may not be as quick to adopt high- 
speed data services and more channels will remain dedicated to cdmaOne services. 
As cdma2000 phase two capabilities become available, an operator has even 
more choices of ways in which to use the spectrum to support the new services 
(see Figures 16.17 and 16.18). 

The network standards for the cdma2000 network consist of the interoper- 
ability specification (IOS) and ANSI-41. The IOS defines the interfaces within 
the radio access network (RAN), between RAN and CS-CN, and between RAN 


cdmaOne cdma2000 
f fo Phase One 


1.25 MHz 1.25 MHz 1.25 MHz 
MHz MHz 


cdmaOne 


Figure 16.16 Intermixing of cdmaOne and cdma2000 phase one (3G1X). 


« 7.5 MHz » 


1.25 MHz 


Figure 16.17 Intermixing of cdma2000 phase one (3G1X) and cdma2000 phase two 
(3G3X). 


Figure 16.18 Intermixing of cdmaOne, cdma2000 phase one (3G1X) and cdma2000 
phase two (3G3X). 
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and PS-CN. ANSI-41 defines the interfaces between different circuit-switched 
core network components. The components are mobile switching center (MSC), 
visitor location register (VLR), home location register (HLR), and authentication 
center (AC). In addition to these standards, cdma2000 networks leverage many 
Internet standards such as remote authentication dial-in user service (RADIUS), 
Mobile IP, etc. The Internet standards are used only for packet data services. The 
following interfaces are defined (see Figure 16.19): 


PDSN IETF 
Specifications 


| Internet 
PDSN | AAA, FA, HA 
A10 (user traffic) A11 (signaling) 


BTS 2 |. A8 (user traffic) A9 (signaling 


) 

A1 

А2 MSC 
AS 


A3 (user traffic) 


FA: Foreign Agent 

HA: Home Agent 

PDSN: Packet Data Service Node 

PCF: Packet Control Function 

AAA: Authorization, Authentication, and Accounting 


lOS: Inter Operability Specification 


Network standards for cdma2000 includes 


e Inter Operability Specification (IOS): defines interfaces within RAN, 
between RAN and CS-CN, between RAN and PS-CN 


e ANSI-41 
e IOS interfaces between BSC and MSC are A1, A2, and A5 
* |OS interfaces between BSCs are A3 and A7 
e IOS interfaces between RAN and PDSN are A10 and А11 


Figure 16.19 cdma2000 interfaces. 
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e А1 — signaling connection between ће MSC and BSC 

e A2— 64kbps DSO to carry full-rate speech or circuit-oriented data 

e A3—carries user traffic (voice/data) using ATM AAL2 and signaling using 
ATM AALS between BS and a service distribution unit (SDU); includes separate 
signaling and traffic subchannels 


e A5 —user traffic connection that carries a circuit data call between the SDU 
and the interworking function (IWF). This interface is only necessary when 
SDU and IWF are in separate pieces of equipment 


А7 —signaling connection using ATM AALS between two BSCs to support 
efficient inter-BSC packet mode soft handoff 


e A8—user traffic connection between source BSC and packet control function 
(PCF) for packet data services 


A9 —signaling connection between source BSC and PCF for packet data 
services 


e A10— user traffic path between a PCF and a PDSN 


A11— signaling connection between a PCF and PDSN for packet data 
services 


Figure 16.20 shows the possible architecture for a cdma2000 network. The 
BSC and BTS provide the RAN function of the IMT functional model. The MSC/ 
VLR and HLR are the main entities of the CS CN. The CS CN is based on ANSI- 
41 protocol. Other functional entities of the CS CN are AC, voice mail (VM), and 
message center (MC). The PS CN of the cdma2000 network offers connectivity 
to the Internet. The PDSN is the primary element of the PS CN. It provides an 
interface to the RAN and routes packets from the Internet to the RAN and vice 
versa. The PS CN uses mobile IP protocol to provide mobility for packet data 
services. The mobile IP entities are the home agent (HA) and foreign agent (FA). 
The AAA server provides authentication, authorization, and accounting function- 
ality in PS CN. Figure 16.21 shows the Internet access to the end user. 


16.6.1 cdma2000 1X EV-DO 

cdma2000 1X EV-DO (also called high data rate (HDR)) is the high-speed, high- 
capacity wireless data-only technology that provides up to 2.4 Mbps in a 1.25 MHz 
channel. In the HDR, the system is optimized for packet data services, with a decen- 
tralized architecture based on the IP protocol/platform. The HDR is compatible with 
CDMA IS-95 networks. In conjunction with an existing voice network, or stand- 
alone data network, the HDR offers a high-speed, cost-effective data solution. Its 
aim is to maximize throughput subjected to an acceptable delay. The HDR optimizes 
forward (down) link for packet data. Unequal delays and data rates depend on users' 
locations. The reverse (up) link structure is similar to that of cdma2000 1X. 
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Figure 16.20 cdma2000 network architecture. 
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=, Foreign 


Agent/PDSN 
Knows Mobile’s 
Care of address 
Mobile IP Tunnel Care of address 
Wireline Visited Home Enterprise 
Access Network Network Network 


Network 


User Data 


mener Control Data 


e FA — a router in the visited system to notify HA that the end-user is attached to it. 
FA delivers datagrams to the end-user. 


e HA — a router in the home system to maintain the user current location and to 
tunnel and deliver users datagrams when the user is away from home. 


* AAA protocol developed in IETF is DIAMETER. 


Figure 16.21 Internet access to end-user in the cdma2000 network. 


The HDR does not rely on any element in the CDMA voice network to 
provide service, mobility, or roaming. The operator does not require MSC or net- 
work elements such as HLR and VLR. As a result, HDR can be deployed by any 
voice operator irrespective of the voice technology it is currently using. All that is 
needed to launch HDR service is 1.25 MHz of paired spectrum. An HDR network 
has three key elements: radio nodes (RNs), a radio network controller (RNC), 
and a packet data serving node (PDSN). Each radio node typically supports three 
sectors and serves one cell site. A dedicated transceiver in each sector terminates 
the HDR airlink between the user equipment (UE) and RN. Higher layers of the 
HDR protocol are processed at the RNC. The RNC also manages handoffs and 
passes user data between the RNs and the PDSN. The PSDN is a wireless edge 
router that connects the radio network to the Internet. 

In addition to the RNC and PDSN, an HDR data center has an aggregation 
router, an element manager system (EMS), and several Internet service provider 
(ISP) servers. The aggregate router terminates IP traffic from the RNs and passes 
it to the RNC. The EMS manages the radio access network with commonly used 
ISP servers. It includes standard IP servers for the domain name system (DNS), 
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dynamic host configuration protocol (DHCP) and authentication, authorization, 
and accounting (AAA). 

The basic unit of transmission on the downlink is the airlink frame. Airlink 
frames destined for different users in the same sector are time division multiplexed 
(TDM). The radio nodes transmit each airlink frame at the link rate, which can 
vary between 38.4 kbps and 2.4 Mbps. The link rate depends on the SNR at the 
subscriber's location. SNR may vary significantly within a cell. Since the link 
between the network and the subscribers is shared, depending on system load, 
the actual data rate experienced by a subscriber can be less than link rate. The 
number of subscribers receiving data at the same time in the same sector deter- 
mines system load. 

On the uplink, subscribers can transmit at data rates ranging from 9.6 to 
153.6kbps. Unlike the downlink, in which a scheduler time-division multiplexes 
airlink frames over the channel, the uplink uses CDMA, which allows multiple 
users to transmit at the same time. The uplink sector throughput represents the 
total link capacity of the uplink. Computed as sum of the uplink data rates of all 
simultaneously transmitting subscribers, it is about 250 kbps per sector or about 
1/5 of the downlink sector throughput. HDR radio nodes equitably share this 
throughput among all active subscribers by using a rate control mechanism. 

The HDR downlink allows variable delays within the bounds of maxi- 
mum/minimum delay equal to 8 achieved by scheduling at higher layers. The rate 
allocation is based on SNR measurements reported by mobiles. Turbo codes are 
used for increased coding gains. There is no power control and no soft or softer 
handoff on downlink. 

Downlink packets are time multiplexed and transmitted at full available 
power. Data rates and slot lengths vary according to user channel conditions. 
Short pilot bursts and periodic transmission of control information are used for 
users without data (see Figure 16.22). Access point (AP, e.g., BS) uses pilot bursts 
to estimate accurately and rapidly channel conditions. The AP also determines 
E/N; to predict effective received SNR. SNR is mapped to the maximum data rate 
value. Uplink data rate request channel (DRC) (see Figure 16.23) is sent to AP with 
a 4-bit value that maps SNR into one of the data rate modes (see Table 16.6). 

Each point-to-point protocol (PPP link) is carried by a separate radio link 
protocol (RLP) stream. This gives flexibility to allow for finer control of the QoS. 
The model for the transport of signaling streams is based on PPP. Signaling is 
partitioned into link control protocol (LCP) and stream control protocol (SCP) 
(see Figure 16.24). LCP is used at the start of the session and to control the radio 
link during the session. For example, LCP is used at the start of the session to 
negotiate the link layer authentication type that will be used for the duration of 
the session. SCP is used to carry stream-specific signaling messages. 

Figure 16.25 shows the HDR and 3G1X mobile IP (MIP) architecture. Note 
that the changes are the addition of MIP, software upgrade only, and that HDR 
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Figure 16.23 (a) Channel estimation and (b) DRC timing diagram. 
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Table 16.6 Data rates of 3G1X EV-DO in downlink direction. 


Encoder packet 


Data rate (kbps) duration (ms) FEC rate Modulation PN chips per bit 
36.8 26.67 1/5 OPSK 32 
76.8 13.33 1/5 QPSK 16 

153.6 6.66 1/5 QPSK 8 
307.2 3.33 1/5 QPSK 4 
614.4 1.67 1/5 QPSK 2 
307.2 6.66 1/3 QPSK 4 
614.4 3.33 1/3 QPSK 2 
1228.8 1.67 1/3 OPSK 1 
921.6 3.33 1/3 8PSK 1.33 
1843.2 1.67 1/3 OPSK 0.67 
1228.8 3.33 1/3 16-OAM 1 
2457.6 1.67 1/3 16-OAM 0.5 


Multilink PPP 
PPP link PPP link PPP link 
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e IP: Internet Protocol 
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e RLP: Radio Link Protocol 


Figure 16.24 Protocol stack in HDR. 
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Figure16.25 HDR and cdma2000 1X mobile IP architecture. 
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access to the Packet 2000 PDSN is via separate backhaul. The HDR radios may 
coexist with currently installed cells. The L2TP tunneling is replaced with MIP 
tunnels — one of the differences from simple IP. 

Table 16.7 shows a comparison of high-speed downlink packet access 
(HSDPA) and the cdma2000 1X EV-DO. 


16.6.2 cdma2000 1X EV-DV 

The cdma2000 1X EV-DV is an enhancement to the cdma2000 1X data-carrying 
capability that is designed to deliver rates that are significantly higher than the 
cdma2000 revision 0 system. Revision C of the standard specifies higher data 
rates on the forward link (FL), whereas revision D addresses increased rates on 
the reverse link (RL). 

The cdma2000 1X EV-DV system is designed to deliver greater spectrum 
usage efficiencies, backward compatibility for legacy handsets, and all previous 
versions of IS-95 and cdma2000 (including existing channels and signaling struc- 
ture) and support for the broadest possible range of applications. 1X EV-DV 
enhancements occur at the physical layer, MAC, RLP, and layer 3. 

cdma2000 1X EV-DV is designed to deliver real-time circuit-switched 
voice services and high rate packet data services in the same RF carrier. The 
cdma2000 1X EV-DV delivers a peak data rate of 3.09 Mbps and a typical sector 
throughput of 1Mbps in a 1.25 MHz frequency channel. 1X EV-DV delivers a 
system-wide packet call user throughput that ranges from 420 kbps to 1.7 Mbps, 
depending on traffic and channel models, and up to 451.2 kbps peak reverse link 
data rate. 


Table 16.7 Comparison of HSDPA and cdma2000 1X EV-DO. 


Features 


Downlink frame size 


Channel feedback 


Data user multiplexing 


Adaptive modulation and 
coding 


Hybrid ARO 
Spreading factor (SF) 


Control channel approach 


HSDPA 


2ms transmission time interval 
(TTI) (3 slots) 


Channel quality reported at 
2ms rate or 500Hz 


TDM/CDM 
QPSK and 16-OAM mandatory 


Incremental redundancy 


SF = 16 using OVSF channeli- 
zation codes 


Dedicated channel pointing to 
shared channel 


cdma2000 1x EV-DO 


1.25, 2.5, 5, 10 ms variable 
frame size (1.25 ms slot size) 


SNR feedback at 800 Hz (every 
1.25 ms) 


TDM/CDM (variable frame) 
OPSK, 8-PSK and 16-OAM 


Async. incremental redundancy 


Walsh code length 32 


Common control channel 
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Because it supports concurrent voice and data services, 3G1X EV-DV does 
not require new spectrum or dedicated spectrum for data-only use, a feature 
that presents CDMA operators with a more attractive cost structure than other 
evolutionary options. 

The cdma2000 1X EV-DV evolutionary model provides operators with 
exceptional flexibility in meeting daily fluctuations in capacity demands. When 
deployed for voice, data, or in a combined voice/data environment, 1X EV-DV 
delivers needed voice resources during peak-usage commuting hours, while at the 
same time providing carriers with the resources that will be needed to meet grow- 
ing demands for data capacity during data busy hours. 

The cdma2000 1X EV-DV is not an overlay system, but is in fact a true 
upgrade from cdma2000 1X, and provides backward compatibility for IS-95 and 
cdma2000 revision 0 mobile devices. cdma2000 1X EV-DV also reuses existing cell 
sites, and thus maintains current coverage in cdma2000 networks. Figures 16.26 
and 16.27 provide comparisons of peak data rate and aggregate throughput of 
cdma2000 1X and cdma2000 1X EV-DV. 


cdma2000 1X EV-DV New Channels 


The cdma2000 1X EV-DV specifications incorporate three new control channels 
and one new traffic channel. In the forward link, there are two new channels added: 
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Figure 16.26 Peak data rate comparison. 
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Figure 16.27 Aggregate throughput comparison. 


(1) a new control channel, forward packet data control channel (F-PDCCH), 
and (2) a new traffic channel, forward packet data channel (F-PDCH). Two new 
control channels are provided in the reverse link: (1) the reverse channel quality 
(R-CQICH), and (2) reverse ACK channel (R-ACKCH). Operators can benefit 
from the fact that cdma2000 1X EV-DV channels are integrated with current 
cdma2000 1 X channels to cover areas that need a higher data rate. 


cdma2000 1X EV-DV Features 
The following are the new features of 1X EV-DV. 


* Forward link capacity. 1X EV-DV leverages a number of improvements 
including adaptive modulation and channel coding schemes, the use of both 
time division multiplexing (TDM) and code division multiplexing (CDM), a 
forward packet data channel, and hybrid automatic repeat request (HARQ) 
at the physical layer to deliver forward link data rates up to 3.09 Mbps and 
average sector throughput of 1 Mbps. 


e Backward compatibility. Because it incorporates a number of relevant 
cdma2000 standards such as the reuse of 1X reverse link channels, IOS 
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interoperability, cdma2000 MAC and signaling layer procedures, and radio 
channel handoff, cdma2000 1X EV-DV provides seamless support for voice 
and legacy services. This backward compatibility means consumers can 
use an operator's entire network with a single terminal. For operators, this 
strength extends the useful life of the existing infrastructure while opening a 
smooth evolutionary path from the current cdma2000 1X infrastructure. 


Concurrent voice and data. cdma2000 1X EV-DV supports voice and data 
services in the forward and reverse links. The 1X EV-DV network can sup- 
port 1X voice users and 1X EV-DV data users on the same channel at the 
same time, or 1X EV-DV users can have 1X voice and DV data sessions 
active at the same time. This capability gives operators improved spectrum 
flexibility, the ability to share the voice and data spectrum, and the freedom 
to provide concurrent voice and data. 


Multiple traffic types. The specification supports multiplexing of signal and 
user data over the forward packet data channel and multiple concurrent data 
sessions. This capability means users can use more than one application — such 
as voice and data at the same time. For operators this capability translates 
into the ability to generate revenue from multiple simultaneous applications, 
without the need to dedicate a separate channel for each application. 


TDM/CDM. cdma2000 1X EV-DV is the only standard in the cdma2000 
development path that enables both TDM and CDM scheduling, favor- 
ing TDM where the technology works best and supporting CDM for wire- 
less application protocol (WAP), voice over IP (VoIP), streaming video, and 
other data services. Because data is sent in bursts rather than on a continu- 
ous basis, TDM/CDM statistical multiplexing enables the system to maxi- 
mize throughput gain. Operators can leverage this feature to enjoy optimum 
flexibility in a demanding marketplace. 


Hybrid ARQ. By migrating ARQ from the upper layer to the physical 
layer, cdma2000 1X EV-DV maintains high bandwidth through the very 
rapid retransmission of frames received in error. Rather than discarding 
failed transmission attempts, the HARQ technique combines those failed 
attempts with the current attempt. This supports a higher tolerance to selec- 
tion errors for faster adaptive modulation and coding (AMC), and creates a 
more potent code. Two basic forms of combining techniques incorporated 
with HARQ are the chase combining and incremental redundancy (IR). 


Adaptive modulation and coding. To provide real time adaptation in a 
changing RF environment, 1X EV-DV uses forward link modulation and 
coding variation to adoptively assign users the best modulation and cod- 
ing rate under current channel conditions, a capability known as *chan- 
nel sensitive" or *opportunistic" scheduling to maximize the multiuser 
diversity gain. By varying the number of bits per RF frame and the coding 
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algorithm, and by providing continuous feedback to continually maximize 
link throughput, this approach delivers higher data rate performance and 
supports services that could not be provided using previous-generation 
CDMA technology. 


* Cell selection: Cell selection takes advantage of micro diversity by allowing 
the handset to select the best serving sector. 


Subscriber Benefits 

By delivering improved overall data rates, and by allowing users to perform 
simultaneous voice and data tasks on the same device (i.e., holding a voice con- 
versation while at the same time downloading e-mail messages) takes consumers 
an important step toward the promise of the 3G future. 

End users will also benefit from the low latency response of the 1X EV-DV 
system. So far, with even small amounts of data transferred, end users will see a 
much faster response by the network. This fast response time makes applications 
such as web browsers much more usable with 1X EV-DV than with cdma2000 
1X networks. 

The efficiencies supported by 3G1X EV-DV will allow operators to deliver 
data-intense services more quickly, more effectively, and at a lower cost. Those 
capabilities translate directly into better services and lower prices for subscribers. 


cdma2000 1X EV-DV in the Marketplace 

Real time gaming applications typically generate a relatively small volume of 
delay-sensitive traffic, which arrives at a fairly regular rate as updates to the game 
engine state. The popular on-line game requires about 1.6kbps on each of the 
forward and reverse links. While the packets are not as continuous as voice, they 
do arrive in a reasonably regular fashion at a rate of roughly one packet per 
40 ms. To maintain playability of the game, the application round trip delay must 
be less than 160 ms, and for this reason the traffic must obtain immediate radio 
resources. Since cdma2000 1X EV-DO systems do not meet these requirements 
effectively, 1X EV-DV is ideally positioned to exploit the on-line gaming market. 

On the forward link, with slot sizes of 1.25, 2.5, and 5ms, and TDM/ 
CDM capability, 1X EV-DV serves more users per cell. On the reverse link, 
1X EV-DV frame size is 20 ms for revision C and 10 ms for revision D, which will 
meet real-time gaming delay requirements. 

The cdma2000 1X EV-DV evolutionary pathway also provides significant 
support for VoIP. IP connectivity is expected to dominate the terrestrial transmis- 
sion network for cellular systems, with end users expecting seamless connectivity 
to services delivered exclusively via IP networks. The all-IP feature will enable 
transcoder-free operation and the use of wideband speech coding, and all-IP voice 
efficiency is supported by the IP-optimized voice codec. 
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The cdma2000 1X EV-DV requires a lower end-to-end infrastructure investment 
compared to cdma2000 1X EV-DO, and enables simultaneous voice and data services 
in either a voice capacity enhancement or all-IP deployment. Due to its mixed-traffic 
capabilities (supporting voice, video, gaming, WAP, HTTP, and FTP) 1X EV-DV also 
delivers the superior QoS performance required to ensure a reliable VoIP revenue 
stream. When deployed in a voice, data, or dual voice/data environment, 1X EV-DV 
provides an assured level of voice resources during high-volume commuting hours, 
as well as greater data resources when those applications take off. 1X EV-DV can 
be deployed for data-only services to deliver performance at least on a par or better 
when compared to 1X EV-DO; and when implemented in a voice/data environment, 
1X EV-DV enables a class of services that 1X EV-DO cannot support. 


16.7 Technical Differences between cdma2000 and WCDMA 


We conclude the chapter by listing major technical differences between the two 
wideband CDMA technologies (see Table 16.8) and including their deployments 


Table 16.8 Major technical differences between cdma2000 and WCDMA. 


Core network 
Channel bandwidth 
Channelization codes 


Chip rate 


Synchronized base station 


Frame length 


Multi-carrier spreading option 
Modulation 

Modes of operation 

Source identification code for 


sector 


Source identification code for 
mobile 


cdma2000 


ANSI-41 MAP 
1.25 MHz (1X), 3.75 MHz (3X) 
4-128 (1X), 4-256 (3X) 


1.2288 Mcps (1X), 3.6864 Mcps 
(3X) 


Yes 


5ms (signaling), 20, 40, 80 ms 
physical layer frames 


Yes, but in cdma2000 1X 
(direct spread) 


OPSK (forward link), BPSK 
(reverse link) 


FDD 


One PN code (32,768 chips), 
512 unique offsets are gener- 
ated using PN offsets 


One long PN code (242) chips, 
unique offsets are generated 
based on ESN, not assigned 
by sector 


WCDMA 


GSM MAP 
5.0 MHz 
4-256 


4.096 Mcps (DOCOMO) 
3.84 Mcps (UMTS) 


No; but synchronized BS is 
optional 


10 ms for physical layer, 10, 
20, 40, and 80 ms for transport 
layer 


No (direct spread) 


OPSK (both links) 


FDD and TDD 


512 unique scrambling codes 
each identifying a sector 
(38,400 chips) 


Unique scrambling codes 
assigned by sector 


(Continued) 
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cdma2000 WCDMA 

Channel coding Convolutional and turbo code Convolutional and turbo code 
Power control Both links (800 Hz) Both links (1500 Hz) 
Circuit-switched core network 15-41, MSC/HLR/ AC GSM-MAP, MSC/ HLR/AUC 
Packet-switched core network IETF based, PDSN/ AAA/HA/FA GPRS based, SGSN/ GGSN 
Voice coder EVRC AMR 
Peak data rate 614kbps 2Mbps 
Multimedia services Yes Yes 
Overhead Low (because of shared pilot High (because of non-shared 

code channel) pilot code channel) 


(see Figure 16.28). We also provide end-to-end call flows in the two systems 
(see Figures 16.29 and 16.30) [14-16]. 

Figure 16.31 shows the layout of the cdma2000 1X and cdma2000 1X EV-DO 
network. The main differences in the GSM/UMTS architecture are in the packet 
domain where the PDSN is used. It has a similar role to the SGSN and GGSN 
in UMTS. Mobility management with 3GPP2 is based on mobile IP (RFC 2002) 
instead of GPRS mobility management in the GPRS/UMTS packet-switched 
network. 


16.8 Summary 
The ongoing growth in demand for high-speed data services and multimedia 
applications over mobile wireles networks has set up new requirements and objec- 
tives for the next generation of air interface protocols and network architectures. 
Although the channelization, signaling, and access protocols of 2G cellular sys- 
tems were designed to efficiently support symmetric circuit-switched data and 
voice traffic, most of the new data applications are IP-based with highly asym- 
metric packet-switched traffic. This asymmetric and bursty nature of multimedia 
packet data traffic along with the variability of data rates and packet sizes and the 
complexity of QoS management makes conventional voice-oriented channeliza- 
tion and access protocols of 2G systems inefficient. 

3G systems use new physical and logical channelization schemes with 
enhanced media and link access protocols. Also, to maximize the spectrum effi- 
ciency, the physical layer designs utilize advanced coding, link adaptation, and 
diversity schemes as well as power and interference control mechanisms. 

The scope of the 3GPP2 activities was to harmonize different variations of 
cdma2000 in a single family of standards that is based on the evolution of cdmaOne air 
interface. This scope was also expanded to include the development of a data-optimized 
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(1) Started out with low speed Global System Mobile (GSM), TDMA services, CDMA, and Nextel’s iDEN (integrated Digital Enhanced Network) that was 


enhanced TDMA service. 


(2) Moved next to General Packet Radio Service (GPRS)—a packet service that is suitable for non-real-time (email, fax, 
asymmetric web browsing) internet applications. It is a circuit sharing and time slot sharing service that is bursty but 
better than an earlier service called HSCSD—High Speed Circuit Switched Data service that allowed users to 
concatenate time slots in a TDMA service thus giving users more throughput and higher data transfer speeds in the 


early systems. 
(3 


cdma2000, following a different path than the GSM standard approach was taken by some of the vendors. 1х means 


one times the single CDMA bandwidth being used (1.25 MHz radio channel ), RTT means Radio Transmission 


Technology. 


Figure 16.28 Deployment of 3G systems. 
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Figure 16.29 End-to-end call flow in WCDMA. 
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Figure 16.30 End-to-end call flow in cdma2000. 
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Figure 16.31 cdma2000 1X and cdma2000 1X EV-DO network. 


air interface called the high-rate data (HDR) system. In the development of cdma2000 
systems the core network specifications are based on an evolved ANSI-41 and IP 
network; however, the specifications also include the necessary capabilities for opera- 
tion with an evolved GSM-MAP-based core network. 

The preliminary release of cdma2000 proposed as an RTT to ITU was IS2000 
Release 0, which is also referred to as the 1X RTT system. The next cdma2000 
release was Release A that was published in the year 2000. It includes both the 
narrowband (1X) and wideband (3X) multicarrier (MC) modes occupying 1.25 
and 3.75 MHz, respectively. Shortly after release A, release B of cdma2000 was 
issued with a few signaling protocol improvements. In 2002, cdma2000 Release 
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C, called the 1X EV-DV system was published. cdma2000 Release D was pub- 
lished by 3GPP2 in 2004. 

In this chapter, we first presented the cdma2000 layering structure including 
logical and physical channels. We focused on the cdma2000 physical layer and 
provided features of forward and reverse links. Next we outlined the evolution plan 
for cdmaOne to cdma2000 and presented details of the 1X EV-DO and 1X EV-DV 
systems. We concluded the chapter by providing the major technical differences 
between cdma2000 and UMTS/WCDMA and discussing the differences between 
cdma2000 1X EV-DO and high-speed downlink packet access (HSDPA). 


Problems 
16.1 What is cdma2000? 


16.2 Discuss the layering structure used in cdma2000. 

16.3 What are the PLDCF-specific protocols in the cdma2000? Discuss. 

16.4 Discuss forward and reverse link channels in the cdma2000. 

16.5 Briefly discuss the forward and reverse link features in cdma2000. 

16.6 How is orthogonal modulation used in cdma2000? 

16.7 Why is power control used in cdma2000 and WCDMA? 

16.8 Discuss briefly cdma2000 1X EV-DO — a derivative of cdma2000. 

16.9 What are the major differences between 1X EV-DO and HSDPA? 
16.10 Discuss briefly the cdma2000 1X EV-DV system. 
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CHAPTER 17 


Planning and Design of 
Wide-Area Wireless Networks 


17.1 Introduction 

The wireless network planning process can be divided into three phases: the 
initial planning (dimensioning) phase, the detailed radio network planning, and 
the operation and optimization phase. Each phase requires additional support 
functions such as propagation measurements, key performance indicator (KPI) 
definitions, and so on. Both uplink as well as downlink have to be analyzed. In 
2G systems with mostly voice traffic, the links tend to be in balance; however, in 
3G systems with both voice and data traffic, one of the links can be loaded more 
than the other, so that either link could be the limiting factor in determining the 
cell capacity or coverage. The radio waves propagation calculation is basically the 
same for all radio access technologies, with the exception that different propaga- 
tion models (see Chapter 3) could be used. Another common feature is the inter- 
ference analysis. In the time division multiple access/frequency division multiple 
access (TDMA/FDMA) system, the interference analysis is required for frequency 
allocation, whereas in code division multiple access (CDMA) it is needed for cell 
loading and sensitivity analysis. 

The dimensioning phase is used to estimate the approximate number of cell 
sites required, base station configurations, and number of network elements in 
order to determine the projected costs and associated investments. 

The detailed planning phase takes into account the real site locations, real 
propagation conditions, and real user distributions based on the operator’s traffic 
forecasts. After the detailed planning has been performed, network coverage, 
capacity, and other key performance indicators representing the network can be 
analyzed. 

The network operation and optimization phase deals with individual cell 
and system testing. It is used to verify key performance indicators in the detailed 
planning phase to optimize the network. 

In this chapter, we focus on the dimensioning phase and demonstrate steps 
to determine the number of cell sites, the number of radio network controllers 
(RNCs) and other network elements. 
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17.2 Planning and Design of a Wireless Network 

The planning of a wireless network is a multidiscipline task in which competing 
requirements must be balanced. Network plans change throughout the life of 
a wireless network. During the initial phase, coverage is the primary issue and 
traffic demand is secondary. Too small a network initially will require expansion 
later; in the first few years, human resources need to be devoted to the roll-out of 
the network, not to re-engineering the existing network. 

To establish the size of a cellular network, we need to know the: 


* Network topology: base-station transceiver-base station controller-mobile 
switching center (BTS-BSC-MSC) 
* Link capacity: BTS-BSC, BSC-MSC 
* BSC sizing 
* MSC sizing 
Cell and frequency planning in a cellular network requires initial traffic 
estimation, a traffic growth plan, the selection of an initial design, an initial cell 
plan, a network expansion plan, a selection of reuse pattern, the development of 
an initial theoretical plan, computer simulation, localized performance measure- 


ments, and final network design. We need the following data to develop a traffic 
plan for a cellular network: 


The number of users 


Users’ behavior, i.e., heavy or light users 


Busy-hour traffic as a percentage of the total traffic 


Users' distribution over the service area 


Division of the service area into zones of different traffic density 


A cellular network growth plan involves time to roll out the network, 
requirements of additional cells, requirements of microwave link sites, and the 
cost to rework network versus initial deployment costs. 

Basic traffic engineering of a cellular network is based on coverage. In this 
case, the maximum cell radius based on the required in-building coverage criterion 
is used. Often a maximum cell radius of less than 10 km is used to determine the 
required number of cells in the coverage area. For some in-building coverage in 
large urban areas, cell radius may be 1 km or even less to achieve good in-building 
coverage. 

To design for capacity, market forecasts of average subscriber call minutes 
per month are used to determine the number of busy hours per day. This is then 
used to calculate the average busy-hour traffic per subscriber. The frequency reuse 
plan is established from the available spectrum. The traffic capacity of a cell is 
determined based on a grade of service (GoS) criterion. Market forecasts for total 
number of subscribers for a given geographic zone are used to establish the number 
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of base stations (BSs) in the zone. The geographic area for each zone is quantified, 
and the number of base stations and cell sites for each zone is calculated. During 
the first few years the network design is coverage driven, and in later years is 
traffic- demand driven. To limit expanding cell sites in the first few years when 
human resources are focused on network roll-out, the initial deployment is based 
on a four- to five-year design period. 


Example 17.1 
Using the following data for a GSM1800 network, calculate (1) average busy- 
hour traffic per subscriber, (2) traffic capacity per cell, (3) required number of base 
stations per zone, and (4) the hexagonal cell radius for the zone. 

* Subscriber usage per month = 150 minutes 

* Days per month — 24 

* Busy hours per day = 6 

* Allocated spectrum = 4.8 MHz 

* Frequency reuse plan = 4/12 

* RF channel width = 200 kHz (full rate) 

* Present number of subscribers in the zone = 50,000 

* Subscriber growth = 5% per year 

* Area of the zone = 500km? 

* Initial installation based on a four-year design 

* Capacity of a base station transceiver (BTS) = 30 Erlangs 


Solution 


А E 150 ER 
Erlangs per subscriber EUST 0.0174 


Total number of RF carriers — d — 24 


RF carriers per cell with a reuse factor of 4 — 225 = 2 (3 cells per BTS) 
x 


Traffic channels per cell (assuming two control channels per cell) = 2 X 8 — 
2=14 

Traffic capacity of a GSM cell at 2% GoS (using Erlang-B table in Appendix A) = 
8.2 Erlangs 


Traffic per BTS = 8.2 x 3 = 24.6 < 30 Erlangs 


Maximum number of subscribers per BTS = VE = 1414 


Number of subscribers at initial installation = 50,000(1 + 0.05)* = 60,775 
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Example 17.2 
Using the following data for a GSM network, estimate the voice and data traffic 
per subscriber. If there are 40 BTS sites, calculate voice and data traffic per cell. 


Subscriber usage per month: 150 minutes 

Days per month: 24 

Busy hours per day: 6 

Allocated spectrum: 4.8 MHz 

Frequency reuse plan: 4/12 

RF channel width: 200 kHz (full rate) 

Present number of subscribers in a zone: 50,000 

Subscriber growth per year: 5% 

Network roll-over period: 4 years 

Number of packet calls per session (NPCS): 5 (see Figure 17.1) 
Number of packets within a packet call (NPP): 25 

Reading time between packet calls (T;): 120s 

Packet size (NBP): 480 bytes 

Time interval between two packets inside a packet call (Tint): 0.015 
Total packet service holding time during one hour (Tyo): 3000s 
Busy hour packet sessions per subscriber: 0.15 


Packet Session Time 


Packet Call 


\\ 


Reading \ \ 
———M Time M—— 


Packet 
e ө ө a 


JE Packet Arrival Interval 


Figure 17.1 Packet session. 
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* Penetration of data subscribers: 25% 
* Data rate of each subscriber: 48 kbps 
• Packet transmission time: 10s 


Solution 


No. of bits transmitted during packet session time = NPCS x S o NBP x 8 


| §xX25 x 480 8 . : : 
ҮЛ 480 kilobits 


Packet transmission time = NPCS x NPP x NBP x 8 = 480 = 10s 
1000 х Rate 48 


Refer to Figure 17.1: 


Packet session time = Packet transmission time + T; (NPCS — 1) + Tint (NPP — 1) 
10 + 120(5 — 1) + 0.01(25 — 1) = 490.24s 


Number of packet sessions per subscriber during busy hour = 015 3000 
= 0.918 
Bits per subscriber per second = 480X 9:218 = 0.1224 kbps 
; REEL CONS 
Voice Erlang per subscriber Dis EEO 0.0174 


Number of subscribers at initial installation = 50,000 x (1 + 0.05)^ = 60,775 
Data subscribers = 0.25 x 60,775 = 15,194 

Total voice traffic during busy hour = 60,775 X 0.0174 = 1058 Erlangs 
Total data throughput during busy hour = 15,194 x 0.1224 = 1860 kbps 
With 40 BTS sites per zone 

Voice traffic per BTS — P — 26.45 i.e., 8.82 Erlangs per cell (sector) 


Data throughput per BTS — 1560 = 46.5 i.e., 15.5 kbps per cell (sector) 
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Example 17.3 
Using traffic data per cell for a GSM/GPRS network from Example 17.2, calculate 
(a) data Erlangs, (b) time slot (TS) utilization, and (c) TS capacity. Use the follow- 
ing data: 

* Average call holding time during busy hour: 120 seconds 

e No. of transceivers (ТХ;) per cell: 3 

* No. of TS, per cell for signaling: 3 

* Radio link control (RLC) efficiency: 8096 

* Total numbers of transmitted radio blocks: 9000 

* TS, allocated for data traffic per cell: 3 

* Data throughput per cell (from Example 17.2): 15.5 kbps 

* Voice traffic per cell (from Example 17.2): 8.82 Erlangs 


Solution 
(a) Data Erlangs = 


No. of radio blocks х Duration of block _ 9000 х 0.02 _ 
- 1.5 
Duration of busy hour 120 


(b) TS utilization = n = 0.5 


(с) Throughput рег TS = E х 0.8 = 4.13kbps 


TS capacity — 29 = 8.26 kbps 

TS available for voice traffic = No. of TX, х TS,/TX — TS, for signaling — TS,, 
for data= 3 х8 – 3 – 3 = 18 

Voice traffic @ 2% GoS = 11.49 Erlangs (Е апе-В Table, Appendix A) > 
8.82 Erlangs 


17.3 Radio Design for a Cellular Network 

Several factors are considered in the design of a cellular network. The extent 
of radio coverage, the quality of service for different environments, efficient use 
of spectrum, and the evolution of the network are some of the key factors that 
need to be carefully evaluated by all prospective service providers. Often these 
factors are further complicated due to the constraints imposed by the operating 
environment and regulatory issues. A system designer must carefully balance all 
trade-offs to ensure that the network is robust and of high service quality. 


17.3.1 Radio Link Design 

The first important step in the design of a cellular system is to design the radio 
link. This is required to determine the base station (BS) density in different 
environments as well as the corresponding radio coverage. For a cellular network 
to provide good quality of service (QoS) in indoor and outdoor environments, 
flexibility and resilience should be incorporated into the design. 
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The transmit power of handsets is the determining factor for a cellular system 
with balanced up/downlink power. Although the mobile antenna gain does not 
affect the balancing of the link budget, it is an important factor in the design of 
the power budget for the handset coverage. From a user point of view, a cellular 
network should imply that there is little restriction on making or receiving calls 
within a building or traveling in a vehicle using handsets. A system should be 
designed to allow the antenna of a handset to be placed in nonoptimal positions. 
In addition, the antenna may not even be extended when calls are being made or 
received. In normal system designs, it is assumed that the gain of a mobile antenna 
is OdBi. However, allowing for the handset antenna to be placed in suboptimal 
positions, a more conservative gain of —3 dBi should be used. In reality, mobile 
antenna gain could be as low as —6 to —8 dBi because of the placing of an antenna 
in an arbitrary position or with the antenna retracted into the handset housing, 
depending on specific handsets and their corresponding housing designs. 


17.3.2 Coverage Planning 

The most important design objective of a cellular network is to provide near- 
ubiquitous radio coverage. In the radio coverage planning process, the selection 
of the propagation model (see Chapter 3) is one of the most important consider- 
ations. The accuracy of the prediction by a particular model depends on its ability 
to account for the details of terrain, vegetation, and buildings. This accuracy 
is important in determining path loss and, hence, cell sizes and infrastructure 
requirements of a cellular network. An overestimation of path loss will lead to 
an inefficient use of network resources, whereas an underestimation will result 
in poor radio coverage. Propagation models generally tend to oversimplify real- 
life propagation conditions and may be grossly inaccurate in complex metropoli- 
tan urban environments. The empirical propagation models provide only general 
guidelines; they are too simplistic for accurate network design. Accurate field mea- 
surements should be made to provide information on radio coverage in an urban 
environment. Measured data can be used either directly in the planning process 
to access the feasibility of the individual cell site or to determine the coefficients 
of the empirical propagation model to achieve better characterization of a specific 
environment. 

Another critical factor that affects radio coverage is penetration loss for both 
buildings and vehicles. If radio coverage for the outer section of a building is 
sufficient, then an assumed penetration loss of 10 to 15 dB should be adequate. 
However, if calls are expected to be received and originated within the inner core 
of the building, a penetration loss of about 16 to 20dB should be used. Similarly, 
for in-vehicle coverage, penetration loss is equally important. A car could expe- 
rience a penetration loss of 3 to 6dB, whereas vans and buses may have larger 
variations. The penetration loss at the front of a van should be no more than 
that experienced in a car, but the loss at the back of the van could be as high as 
10 to 12 dB, depending on the amount of window space. Thus, for design purposes, 
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a high penetration loss should be assumed to ensure good service quality. For 
an urban environment, because building penetration loss is the dominant factor, 
in-vehicle penetration will generally be sufficient. Other losses such as body, cables, 
and connectors, should also be accounted for in the link budget calculations. 

Radio propagation is subjected to shadowing (see Chapter 3). To ensure 
that the signal level in 90% of the cell area is equal to or above the specified 
threshold, a shadow margin, which is dependent on the standard deviation of the 
signal level, must be included in the link budget calculations. For a typical urban 
environment, a shadow fading margin of 8 to 9dB should be used based on the 
assumption that path loss follows an inverse exponent law. 


17.4 Receiver Sensitivity and Link Budget 

The minimum received signal power to satisfy a certain bit error rate (BER) 
needs to be calculated. This is referred to as receiver sensitivity or Smin. For voice 
transmission, a BER of 107° is usually used. We should also know under which 
conditions (additive white Gaussian noise (AWGN) or fading) the BER is evalu- 
ated. When the holding time for a radio channel is relatively long compared to 
the fading duration as in the case of voice transmission, we evaluate the BER 
under fading conditions. The fade margin is determined from the statistics of a 
large-scale signal variation based on the lognormal distribution. On the other 
hand, when the holding time of a radio channel is relatively short as in the case 
of data transmission, we evaluate the BER under static conditions. In this case, 
fade margin is determined from the combined statistics of both large-scale and 
small-scale signal variations based on the lognormal and Rayleigh distribution 
(see Chapter 3), respectively. 


17.4.1 Link Budget for the GSM1800 System 

A link budget is used to compute cell coverage by accounting for all the factors 
that determine the cell coverage to balance the system cost against the required cell 
capacity. Link budget factors controlled by the RF engineer include transmitter- 
radiated power, antenna gain, noise figures, and co-channel interference (i.e., reuse 
factor N). Factors that cannot be controlled directly, but must be considered in the 
link budget, include propagation path loss and system bandwidth. We show link 
budget calculations for uplink and downlink of a GSM1800 system. 


Example 17.4 
Using the following data for GSM1800, develop downlink (see Figure 17.2) and 
uplink (see Figure 17.3) budgets and determine the cell radius. 

e Base station transmit power (Р,): 4W = 36 dBm 

e Mobile station transmit power (Р): 24 dBm 

* Mobile station (hand-held unit) noise figure: 8 dB 
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Ga 


Transceiver 
TRx 


Рт= 36 dBm 
(4 Watts) 


S (dBm) = Pr - Lc GA- H- Lp 
М (dBm) = № + B (dB) + F(dB) 


Figure 17.2 Downlink link budget for GSM1800. 
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signal-to-noise ratio 


S (dBm) = Py - „+ Gu, H- L,* F 
N (dBm) = № + B (dB) + F (dB) 


Figure 17.3 Uplink link budget for GSM1800. 
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Base station noise figure: 5 dB 


Base station transmit and receive antenna gain (Са): 18 dBi 
e Mobile antenna gain: 0 dBi 
Required signal-to-noise ratio (SNR): 12 dB 


* BS transmit antenna cable, connector, and filter losses (Г): 5 dB 
* BS receiver antenna cable, connector, and filter losses (Г): 2dB 


Orientation/body losses at mobile: 3 dB 
Shadow fading: 10.2 dB 

* Thermal noise density: — 174 dBm/Hz 
* Antenna diversity gain at BS: 5 dB 


Solution 
Mobile station noise floor: 


N = —174 + 10log (200,000) + Noise figure = —174 + 53 + 8 = —113 dBm 


0n S = = _ 
Sues N [S]... 113 + 12 = —101 dBm 


Mean signal required at mobile station: 


Smean = Smin + shadow fading + (orient)/(body) = —101 + 10.2 + 3 = —87.8dBm 
Lp = P; — Lc + GA — Smean = 36 — 5 + 18 — (—87.8) = 136.8dB 
Base station noise floor: 
N = —174 + 10log (200,000) + 8 = —116 dBm 


Smin for acceptable quality with diversity: 


Smin = N + (2) — diversity = —116 + 12 — 5 = —109 dBm 
N reqd 


Mean signal required at base station: 
Smean = Smin + shadow fading + (orient)/(body) = —109 + 10.2 + 3 = —95.8dBm 


Lp = Pm — Smean + GA — Lc = 24 — (95.8) + 18 – 2 = 135.8 dB 
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Next we choose the link with the least acceptable path loss to calculate the 
cell radius. In this case the coverage will be limited by uplink. Hand-held units 
inside a building experience an additional path loss that is dependent on building 
type, building material, and placement of the user within the building. Changing 
antenna height, gains, or use of antenna diversity will also affect coverage under 
noise-limited conditions. 

We use uplink path loss and Hata model to calculate cell radius as: 


Lp = 133.2 + 33.8log К; where К is the cell radius in kilometers. 


>. R 10(135.8-133.2)/33.8 = 1 2 km 


17.4.2 Pole Capacity of a CDMA Cell 

To determine the pole capacity of a CDMA cell, we consider a user with the 
received signal strength of S at the base station and account for interference from 
(M — 1) users in its own cell, Гоу and M users in other cells, Гоһег along with 
thermal power М. We assume the same signal strength at the base station from 
other users. 


Town = (M — 1)8vy 


where: 
vf = channel activity 
М = NoBw 


Total interference including thermal noise power: 


I; = Town + Lother + Nth = [(1 + B)M —1]u,S + NoBy 


=|M- 1 Suy + NoBw (17.1) 
where 
= ]1 = Total same-cell power/(Total same-cell power + Other cells 
+ 
power) 
Cell loading = p = M | = em + lote (17.2) 


Town + Lother + Neh 


max 


Ep = 


Gp: S (17.3) 
1, NoBw + (M — 1)u¢(S/m-)(1 + B) 
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Solving Equation 17.3 for M, we get 


NoB 
M=1+G Де Dou 17.4 
PEyI)vg(- B)| 1 + В) ( 
and solving Equation 17.3 for S, we get 

m (ЕТ) No 
: 1. (M- 101 *B)(EUI) s) 

R Bune 

G 

Mae c rome 17.6 
d` A+B of? ( ) 


where: 
Nc = power control efficiency (often 80% to 85%) 
В = interference factor due to other cells 
d= (Epl T;)reqd 
Ср = processing gain 
No = noise density 
R = information rate 


Equation 17.6 is known as the pole capacity of a cell. We rewrite 
Equation 17.5 as 


Mes = 1 (17.7) 
NoB,, Мах vp (1 + В)(1 = p) 


Note when p tends to 1, Sn, tends to infinity because interference tends to 
infinity. 


17.4.3 Uplink Radio Link Budget for a CDMA System 
We consider an ith mobile in a given cell. The required (Ej/Ij); = а; for the ith 
mobile is given as: 


Re Si |. Re Si 
Ri ` Town = Si + Dues + Neh Ri i Town = Si F Blown + Nth 


= dj, i= 1,2, ... M(17.8) 


where: 
К. = chip rate 
R; = information rate for ith mobile 
Iown = interference for ith mobile from its own cell 
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Tother = Blown = interference from other cells 
Nth = thermal noise power for ith mobile = N;RT4R. 
dj = (Ep/N:)reqa for ith mobile 
Ny = receiver noise figure for ith mobile 
k — Boltzmann constant 
Ty = Absolute temperature 


Solving the inequalities in Equation 17.8 as equalities means solving for the 
minimum required power (sensitivity) S; as 


1 


1+ —© 
Rid; 


(1 + Boss + —L-Nai-1,2,..M (17.9) 


В. 
1+— 
Rid; 


If Equation 17.9 is summed over the mobile stations, M, connected to a 
particular base station, then 


M M 1 M м | 
ZSS ea (ЕЮ + У У Ма (17.10) 
і= 1 і= 1 Rid; i=1 i=1 Rid; 
Te į 
Na 7 (1+ 
М j> + & B) 
У Si(1 + В) = (17.11) 
i=1 M (1+ В) 
Пе 
Rid; 
we define the uplink loading as: 
i 1 
nu =| >, pg AB) (17.12) 


where: 
Ny, = uplink loading 


Next, we modify Equation 17.12 to include the effect of sectorization 
(sectorization gain, А, number of sector, М) and channel activity factor v; then 


M 
pe M N; 
пи = Ут t8 (17.13) 
i=1 Rid; Vi 
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Example 17.5 
Calculate the uplink cell load-factor and number of voice users for a WCDMA 
system using the following data. What is the pole capacity of the cell? 

e Information rate (К): 12.2 kbps 

e Chip rate (К,): 3.84 Mcps 

* Required E/N; 4 dB 

e Required interference margin: 3 dB 

* Interference factor due to other cells: 0.5 

* Channel activity factor: 0.65 


Solution 
From Equation 17.13: 


M 
1 
Load-factor = (1 + В) - У К 1 1 
211+ <=: | 
(C10 UN (ЕМ) М 


Load-factor per voice user = (1 + 0.5) - ТУТ 1 7 TA 000774 


"42.2 2.512 0.65 


Required interference margin = 3dB = 2 = = 

Cell loading = p = 0.5 

Number of voice users = —2-2— = 64 per cell 
0.00774 


Using Equation 17.6 and assuming m. = 1 (for this case), we get the pole 
capacity of the cell as 


3.84x 106. 1 1 1 
M. = к Я ; = 12 
ma^ 152 у 103 0.65 (14 0.5) 2.52 $ 


Example 17.6 
Calculate the uplink throughput for data service only for a WCDMA cell using 
the following information: 

* Required E,/N;: 1dB 

* Required interference margin: 3 dB (cell loading = 0.5) 
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• Interference factor due to other cells: 0.5 
* Channel activity factor: 1.0 


Solution 
1 1 
= м(1 + В): ~ M(1 + В): 
Load factor = M( В) i UO ( B) R Я zi 
R; (Eo/Np)reqd Vi R; (Eb/ Ni)reqd Vi 
eH. 
Throughput = R; X M = coll loadin ж S840 e 1016 kbps 


(Eo/Nyreqd * (1 +B) 1.259 X 1.5 


17.4.4 Downlink Radio Link Budget for а CDMA System 

Downlink dimensioning uses the same method as uplink [7]. For a selected range 
the total base station transmit power must be estimated. In this estimation the 
soft handoff connections must be included. If the power exceeds that estimated, 
either the cell range should be limited or the number of users in the cell should be 
reduced. 


(17.14) 


Rid, y L 
ic iUi bmi 
zm wl 
poc Re Sow Lpni 
where: 

Lpmi = link loss from serving BS m to ith mobile station (MS) 

Lp, = link loss from the other BS z to ith MS 

d; = transmit (Ej/N;) requirement for ith MS including the soft handoff 
combining gain and average power rise caused by fast power control 

N = number of base stations 

I = number of connections in a sector 

€; = orthogonality factor ( 0 = £j x1); & = 1, fully orthogonal 

N 
L mi 
i = 2 


p L defines the average other-to-own cell interference in 
pni 


downlink 


The total base station transmit power estimation must take into account 
multiple communication links with average distance (Тр) from the serving 
BS. In the radio link budget calculations in the uplink, the limiting factor is MS 
transmit power; in the downlink the limiting factor is total base station transmit 
power. While balancing the uplink and downlink service areas both links must be 
considered. 
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The interference degradation margin to be taken into account in the link 
budget due to certain loading p (in either uplink or downlink) is 


L = 10log(1 — p) (17.15) 


Some margin is required in MS transmission power to maintain adequate 
closed-loop fast power control in unfavorable propagation conditions such as 
near the cell edge. This applies especially to pedestrian users, where the E,/N; to 
be maintained is more sensitive to closed-loop power control. 


Example 17.7 
Calculate the downlink cell load-factor and number of voice users per cell for a 
WCDMA system using the following data. 

e Information rate (К): 12.2 kbps 

e Chip rate (К,): 3.84 Mcps 

* Required E,/N;: 4 dB 

* Average interference factor due to other cells: 0.5 

e Orthogonality factor (&): 0.6 

e Interference margin: 3 dB 


Solution 


I 
2: ; ; 1 
"lp, = (E igi): > RO 


i=1 = 


К; (ЕЫМ№) а Y 


1 
3840. 1 ., 
12.2 2.512 0.65 


Load-factor per voice user = (0.6 + 0.5) - = 0.0057 


Interference margin = 3dB = 2 = 


qi o 
jr)? 0.5 


Number of voice users — == 87 per cell 


0.5 
0.0057 
Example 17.8 
Determine the minimum signal power required for the acceptable quality of voice 


at the base station receiver of an I$-95 CDMA system. What is the maximum 
allowable path loss? Use the following data and refer to Figure 17.4. 


17.4 


Receiver Sensitivity and Link Budget 


Gm 
L 


ct 


Mobile Station 
Base Station 
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Figure 17.4 Uplink transmission from MS to BS. 


Noise density (No) = —174 dBm/Hz 

Channel bandwidth (B,) = 1.25 MHz 

Chip rate (Re) = 1.2288 Mcps 

Receiver noise figure (№) = 6dB 

Effective radiated power of the mobile = 0.5 Watt (27 dBm) 
Transmitter cable and connector loss (Let) = 0.5 dB 
Body loss (Lpody) = 1.5 dB 

Receiver cable and connector loss (Le) = 2dB 
Interference margin (mins) = OdB 

Fast fading margin (fading) = 2 dB 

Penetration losses (Lpent) = 8 dB 

Transmitter antenna gain (G,,) = OdBi 

Receiver antenna gain (Gp) = 12 dBi 

Fade margin (fm) = 8dB 

Required E,/N; = 7dB 


Solution 


Base station noise floor: 


Nth = No + Ne = —174 + 6 = – 168 dBm/Hz 


Required SIN;: 


(8/1), „да = (ЕЪР) ода + 10log(R,/B,) = 7 + (10)log( 42558} = 6.93 dB 
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Minimum signal power required: 


Smin = (S/Ni)rega + 10log Rc + Neh = 6.93 + 10log (1.2288 х 10$) — 168 
= —100.17dBm 


We refer to Figure 17.4: 
Maximum allowable path loss: 


Lpmax = (Pin — Smin) + (Gp + С) — (Lbody + Lact Ler + fm + Lpent) — Mint — Mfading 
= 27 — (10047) + (12 + 0) — (1.5 + 0.5 + 2.0 + 8 + 8) — 2= 117.174В 


Example 17.9 
Develop a radio link budget for uplink and downlink of a WCDMA system using 
the following data (including Table 17.1): 

e Chip rate: 3.84 Mcps 

* Data rate: 16kbps 

* UL loading: 50% 

* DL loading: 90% 

* Required E,/N; uplink: 4 dB 

* Required E/N; downlink: 6 dB 

* Mobile antenna gain: 0 dBi 


* Base station antenna gain: 18 dBi 


Solution 

The Okumura-Hata model for an urban macro-cell with a base station 
antenna height of 25 m, a mobile antenna height of 1.5 m, and a carrier frequency 
of 1950 MHz gives 


Lp = 138.5 + 35.7logR 
where: 


Ly = allowable path losses (dB) 
R = hexagonal cell radius (km) 
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Table 17.1 Radio link budget (RLB) for WCDMA uplink (UL) and downlink (DL). 


Tx power 


Tx antenna gain 
Cable/body 
losses 

Tx ERIP 
Thermal density 
Receiver noise 
figure 

Receiver noise 
density 
Receiver noise 
power 


Interference 
margin UL 
loading (p) 50%; 
DL loading 90% 


Required Ep/N; 


Required signal 
power 


Rx antenna gain 


Cable/body 
losses 


HO gain (includ- 
ing any micro- 
diversity 
combining gain 
at cell edge) 


Slow fading 
margin 


Slow fading + 
HO gain 


Indoor losses 


Allowable path 
loss 


UL 


125 
20.97 


—16.79 


—119.95 


18 
2.0 


0.0 


—7.27 


—7.27 


8.0 
139.65 


DL 


1372.97 

31.38 
18.0 
2.0 


—7.8 


—107.96 


2.0 


—7.27 


—5.27 


8.0 
140.07 


Unit 


dBm 
dBm/Hz 
dB 


dB 


dB 


dBi 
dB 


dB 


dB 


dB 


dB 
dB 


с o 


o 


Remark 


e=b+c-d 


h=f+g 
i = h +10109(3.84 x 108) 


L = 10log(1—p) 


k = 10log[(E/N)/Gpl -L 


UL = 10109[100-/(3840/16)1 —L 
= —19.8 — (—3.01) = – 16.79 


DL = 1010g[1095/(3840/16)] —L 
= –17.8 - (-10) = -7.8 


l=i+k 


q=pto 


s=e-I+m-n+q-r 
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What is the cell radius based on the calculated allowable path loss? 
139.65 = 138.5 + 35.7logR 
“R= 1.077 кт 


Area covered by hexagonal cell = 2.6 x R? = 3.02 ~ 3.0 кт? 
Number of BTSs required to cover an area of 2400 кт? = 800 


Example 17.10 
During a busy hour an average user downloads 10 megabits with 384kbps, 
2 megabits with 144 kbps, and 1 megabit with 64 kbps. Data has to be retransmit- 
ted 1.2 times the average because of network conditions. Calculate the number of 
users that can be supported on the downlink of the WCDMA network. Use the 
following data: 

e Spreading rate (R,): 3.84 Mcps 

e Noise rise: 3 dB 

e Orthogonality factor (a): 0.8 

* Interference from other cells (3): 0.55 

* (Ep/No)reqa: 4 dB 

* Sector efficiency (№): 0.85 

* Power control efficiency (ne): 0.80 


Solution 
Service rate Average data rate 
e 1.2 x 10 x 103/3600 3.33 kbps 
e 1.2 x 2 x 10/3600 0.67 kbps 
e 1.2 x 1 x 107/3600 0.33 kbps 
Total: 4.33 kbps 
Noise rise = 3dB = 2 = 1 : 
р = 0.5 


Allowable DL capacity = р X DL capacity = 0.5 X 774 = 387kbps 


Number of users = 387 ~ 89 
4.33 
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17.5 cdma2000 1X EV-DO 
In cdma2000 1X EV-DO the data traffic is asymmetric. A much higher 
forward link (or downlink) rate is needed from the base station than that 
generated by the user terminal in the reverse (or uplink) direction. We intro- 
duced cdma2000 1X EV-DO in Chapter 16; in this section we present con- 
cepts behind 1X EV-DO and discuss a procedure for determining the reverse 
link (or uplink) capacity. 

cdma2000 1X EV-DO provides data services in wide-area mobile and fixed 
networks [1]. It is based on the high data rate (HDR) concept introduced in [2,8]. 
The 1X EV-DO system achieves high spectral efficiency due to several techniques 
that make it uniquely suited for high data rate transmission. These techniques 
include the long-range channel estimation and rate prediction, incremental redun- 
dancy, hybrid automatic request control (HARQ), turbo-coding, and scheduling 
that exploits multiuser diversity in a fast fading environment. 


17.5.1 1X EV-DO Concept 

In the 1X EV-DO users are separated into N classes according to their signal-to- 
noise ratio (SNR) levels, and corresponding instantaneous rate levels supportable [8]. 
Thus, user class i can receive slots at rate R; bits per second, where, i = 1, 2, 3,..., N 
and the relative frequency of user packets P; of class i. Suppose slots are assigned 
one at a time successively to each user, then the average rate (or throughput) of the 
downlink will be: 


N 
Ra = >, m (17.16) 
i-1 


Equation 17.16 implies that lower-data-rate users will have proportionately 
higher latency. However, if we want all users to have essentially the same latency 
irrespective of the R; then we should allocate slots inversely proportional to rate, i.e., 


=k 
Si К, (17.17) 
where: 
S; = number of slots allocated to user class i 
k = a constant 
In this case, the average throughput will be: 
N N 
X PRS kY P; 
Ray = 1 “шыт 2 1 (17.18) 


N N N 
УР kÒ PIR; M PAR; 
j= i=1 


i=1 i=1 
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In this case the latency of user classes will be the same. For the general case 
of N classes and latency ratio Ls Lais = Pz, the maximum achievable throughput 
C is given as: 


K N 
> Pre Y Рр, 
C= (17.19) 
P; Р; 
уз ts fn 


where: 

Ry < Ro < Кз... < Ry; К is such that R; = C for all i = К, while 
R; > C for alli > K. 
In this case each user's latency is either Lmax (for those R; < C) or Lmin (for those 
Rj C). 

In the equal access situation we assign a number of slots to each user based 
on the requested data rate. The average throughput will be: 


N 
Y SIR; 
Ray = =! (17.20) 


М 
Y SP 
i=1 


where: 
S; = number of slots assigned to the R; user 


Example 17.11 

Consider a data system in which Ру = 1/2, P; = 1/3, and Рз = 1/6. The data rates 
are Ку = 16kbps, R2 = 64kbps, and R3 = 1024 kbps, respectively. The assigned 
slots are S4 = 16, Sy = 8 and 5; = 2. What is the average throughput? Compare 
it with the equal latency and pr, = 4 cases. 


Solution 
Using Equation 17.20: 


леха чок ха 


Ray 6 = 58.2 кЬрѕ 
16х1+8х1+2х1 
2; 3 6 
For equal latency, using Equation 17.18: 
1 
Ray = = 27.3kbps 
ТЕЕ ТРУС Е УІ 


2 16 3 64 6 1024 
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For pr, = 4, using Equation 17.19: 


= 3 6 = 
C тут; 1 40.96 kbps 


2x16 3x64 6x1024 


It can be observed that equal access provides the highest average throughput. 


17.5.2 Details of cdma2000 1X EV-DO 

Figure 17.5 shows an overview of downlink channels of the cdma2000 1X EV-DO 
system. The pilot, traffic, medium access, and control channels are time division 
multiplex (TDM) channels. The medium access channel consists of two code divi- 
sion multiplex (CDM) channels, and reverse activity and reverse power control 
channels. The control channel is used for system acquisition, system parameters 
broadcast, and service negotiations during call setup. The pilot channel is used 
to provide coherent reception, soft handoff, channel estimation, and long-range 
prediction and rate selection. The reverse activity channel is used for uplink over- 
load and rate control to indicate the uplink interference loading of the sector. The 
reverse power control channel is used for fast power control of the existing uplink 
connections. The traffic channel is used to transmit data to the multiple users in 
a TDM fashion. The time slots have a duration of 1.67 ms (see Figure 16.23) and 
could be assigned to any user as determined by the scheduling algorithm. The 
data on the traffic channel can be transmitted at 38.4, 76.8, 153.6, 307.2, 614.4, 
921.6, 1228.8, 1843.2, and 2457.6 kbps. The higher data rates are obtained using 
a combination of higher order modulation (QPSK, 8-PSK, 16-QAM), forward 


1XEV-DO 
Forward 
Channels 


Access 
Reverse DRC Reverse 
Activity Lock PC 


Figure 17.5 cdma2000 1X EV-DO downlink (forward link) channels. 
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error correction coding (r = !/; and 1/3), and spreading. Transmission of one 
encoder packet can occupy from 1 to 16 time slots. The coding rate, modula- 
tion, and packet duration is one of 12 rate configurations given in Table 16.6. 

Besides the traffic channel, the reverse link (or uplink) of 1X EV-DO 
includes a number of channels used for signaling (see Figure 17.6). These are the 
pilot, reverse rate indicator (RRI), ACK, and data rate control (DRC) channels. 
The RRI channel indicates the data rate of the reverse traffic channel. The ACK 
channel indicates success or failure on the forward link traffic channel. The DRC 
indicates the rate at which the mobile station can receive the forward traffic chan- 
nel and the sector from which the mobile station wishes to receive the forward 
traffic channel. All active mobiles transmit these channels continuously, with the 
exception of ACK. Therefore, the impact of these channels on the uplink capacity 
must be included in the analysis. The uplink traffic channel may transmit at one of 
the following rates: 9.6, 19.2, 38.4, 76.8, or 153.6 kbps, or may be discontinued 
(DTx) where there is no data to send. 

The uplink power control maintains a constant minimal ratio of the pilot chip 
energy (E,) to total noise and interference power spectral density (N;) at the base 
station receiver for each user's uplink signal. In the uplink throughput analysis, 
the required E/N; for a minimum of two paths is assumed since diversity-receive 
antennas used at the cell site guarantee the presence of least two paths. 

For the traffic channel rate of 9.6 to 76.8 kbps, we use the required E/N; рег 
antenna of —23 dB and for the traffic channel rate of 153.6kbps, we use EJN; of 
—22 dB, since the 153.6 kbps traffic channel uses a weaker turbo-coding than other 
traffic channels (1/5 rate versus 1/4 rate). An implementation margin of 10% is added 
to these values for the uplink throughput evaluation. 


1XEV-DO 
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Figure 17.6 cdma2000 1X EV-DO uplink (reverse link) channels. 
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The total received power, S, at the base station from a mobile is the sum of 
the pilot channel power (рр), the DRC channel power (ра), the traffic channel 
power (p;), and the ACK channel power (p,). To simplify the analysis, we neglect 
the contribution of the ACK channel, because only one mobile station at most 
transmits the ACK channel at a time. The ratio of the total received power, 5, 
from the mobile to the received pilot power can be expressed as [3]: 


S = рр t pat bi (17.21) 


^ =1 + 108/10 + 010610 (17.22) 
р 
where: 
Gp = DRC channel gain in dB with respect to pilot 
Gr = traffic channel gain in dB with respect to pilot 
vr = traffic channel activity factor 


The required ratio of the pilot chip energy to total noise plus interference 
power spectral density E,/N; will be: 


E (Pp/Bw) 
a= =d (17.23) 
N; МЧ " (1+ шш = 1)8 


where: 
В = interference factor due to other cells (~0.85) 
M = number of users in a sector 
By = system bandwidth 
Му = noise figure of base station receiver 
d = allowable E,/N; 


We rewrite Equation 17.23 and get: 


NeNoBy 

Мы ере (17.24) 
d(1 + B)S (1 + g)5 

rM =1 +4 (17.25) 


where: 
М һах = the finite limit on capacity (pole capacity). 


Substituting Equation 17.22 into Equation 17.25 we get: 


1 
Mmax = 


1 
{+ 1060/10 ЧА „10°т/10 | (17.26) 


(ат +В) 
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Table 17.2 DL traffic channel gains relative to pilot [3]. 


Traffic channel rate (kbps) Traffic channel gain (dB) relative to pilot 
9.6 3.75 
19.2 6.75 
38.4 9.75 
76.8 13.25 
153.6 18.5 


The sector loading can be expressed as a fraction of the pole capacity Mmax. This 
is typically 70% of the pole capacity. 

The dependency of the traffic channel gain Ст on the data rate is given in 
Table 17.2 and is based on the recommendation in [1]. The DRC channel gain 
is a function of the number of slots in which the same value of DRC is repeated. 
A DRC length of 2 slots provides an acceptable trade-off between the up- and 
downlink performance [5]. The recommended value of the DRC channel gain, 
Gp, is —1.5 dB. 


Example 17.12 


Find the allowable throughput of the reverse link in cdma2000 1X EV-DO if the 
average rate on the reverse traffic channel is 9.6 kbps. Use the following data: 


e Allowable E/N; —23 dB 

* DRC gain with respect to pilot: —1.5 dB 

* Traffic channel gain with respect to pilot: 3.75 (see Table 17.2) 
* Interference factor due to other cells (В): 0.85 


Solution 


1 1 
Mmax = = 26.4 
MaX (1 + 107915 + 100375) 10723 х 1.85 


Mallowable = 0.7 X 26.4 = 18 
Reverse link throughput = 173 kbps 


17.6 High-Speed Downlink Packet Access 
We discussed high-speed downlink packet access (HSDPA) in Chapter 15. In this 


section we present the link budget and throughput calculations of the high-speed 
downlink shared channel (HS-DSCH) [6,10]. 
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HSDPA will require investments to the R99/R4 UMTS (WCDMA) network 
and will affect radio network hardware and software, core network software, 
and transmission network hardware. It can be deployed using small upgrades, 
not required for all base stations and radio network controllers. HSDPA does not 
require a completely new network structure and protects the current investments 
made to the network. 

In HSDPA, all users’ traffic is carried on an HS-DSCH. The HSDPA requires 
a different approach for dimensioning network resources. The most critical dimen- 
sioning input is the average throughput expected from the HS-DSCH. The amount 
of throughput that an HS-DSCH can carry depends on many variables, the most 
important being its power allocation. Because HSDPA is an add-on feature to 
existing BTSs of WCDMA, a fixed amount of power is allocated for use by the 
HS-DSCH. The designer’s target during the dimensioning phase is to specify the 
exact amount of that power. HSDPA power should be sufficient to meet expected 
throughput demand. On the other hand, enough power should be reserved for all 
dedicated channel (DCH) traffic in WCDMA. For a mixed R99 and HSDPA HS- 
DSCH power should be around 4 to 7 W, whereas for a dedicated HSDPA carrier 
the power should be 10 to 12 W, assuming that the maximum transmission power 
of the BTS is 20 W. 

HSDPA can enable a wider coverage than R99 due to adaptive modulation, 
coding, and fast sheduling in the base station. In HSDPA, throughput is not a 
single concept. It consists of average cell throughput for a single user, minimum 
throughput at the cell edge for a single user, and average user throughput. The 
average cell throughput and minimum throughput at the cell edge for a single user 
are not dependent on the number of simultaneous HSDPA users in the cell. These 
are commonly used to set the dimensioning target for HSDPA coverage. HSDPA 
throughput depends directly on radio channel conditions. It changes rapidly all 
the time due to fast fading of the radio channel (BS uses a link adaptation pro- 
cedure). The achieved throughput is different in every transmission time interval 
(TTI) of 2ms. Average throughput can be estimated if the average signal-to- 
interference-plus-noise ratio (SINR) is known (see Figure 17.7) [9]. 

Since HSDPA is to be overlaid on the WCDMA network, the objective of 
the HSDPA link budget is to estimate the maximum data rate achievable in the 
downlink at the cell edge, assuming that coverage is uplink limited. Table 17.3 
gives a sample HSDPA link budget. The HSDPA peak data rate calculations are 
based on the following parameters: 


* Path loss as calculated by the HSDPA link budget 
* Percent of BTS power allocated to HSDPA data users 


e Scheduler margin— For HSDPA, the adaptive modulation and coding 
(AMC) combination allows different operating points to be selected 
based on initial transmission power. It is therefore possible to use either 
a more conservative approach that uses more power but results in fewer 
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Supported effective data rate (Mbps) 


-5 0 5 10 15 20 25 30 


Figure 17.7 Supported effective data rate versus instantaneous per ТТІ SINR. 


Table 17.3 HSDPA link budget. 


Item Downlink Unit Remark 

Base Station 

Tx power HSDPA a 37.4 dBm 5.5W 

CPICH Tx power b 33 dBm 2W 

Total BTS Tx power с 43 аВт 20W 

Transmit antenna gain d 18 dBi 

Cable + connector loss e 4 dB 

DSCH EIRP f 51.4 dBm #=а+а-е 

СРІСН ЕІАР 9 47 аВт g=b+d-e 

Mobile Station 

Noise figure h 8 dB 

Thermal noise i —108 dB 

Downlink loading j 0.87 

Interference margin k 8.9 dB k = 10log[1/ (1 — j)] 

Noise + interference floor | —91.1 dB l=h+i+k 

Orthogonality factor (a) m 0.2 

Geometry factor (G) n —4.4 ав G = ratio of own 
interference to other 
interference + noise 

DSCH spreading factor о 12 ав 10109 16 

SINR p 1.4 dB See (Equation 17.27) 


(Continued) 
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Item Downlink Unit Remark 

Receiver sensitivity q —101.7 dB а=1+р-о 

Receive antenna gain r 0.0 dB 

Body loss S 2 dB 

DL fast fading margin t 0 dB 

Soft handover gain и 0 ав 

Building penetration loss у 16.0 dB 

Lognormal fading margin w 10.0 dB 

Maximum path loss x 125.1 dB x=f-q+r-s-t+u 

-v-w 


retransmissions, or a more aggressive strategy that uses less power but 
results in more retransmissions. 


* Orthogonality factor— This accounts for nonorthogonal interference re- 
ceived by the serving cell because of a multipath. 


The link budget provides a user channel quality estimate that is then mapped 
to a maximum achievable physical layer data rate. The resulting HSDPA data 
rates can vary from 900 kbps to 14.4 Mbps. 


17.6.1 HSDPA SINR Calculation 

The use of Ep/Nọo in link budget requires the knowledge of bit rate or number of 
codes. Since bit rate and number of codes change every ТТІ (2 ms) in the HSDPA, we 
use average SINR instead of Ep/Nọo in link budget calculations. The average SINR 
does not depend on bit rate or number of codes of HSDPA and can be calculated 
when HSDPA power, BS total power, orthogonality, and G factor are known. 


E . (Ptx)DSCH 
SINR = SFpscu (Pax (1-a UG) (17.27) 


where: 
SFpscu = spreading factor of DSCH; fixed at 16 
(Р.„)рѕсн = transmit power of the DSCH 
(Pix) = Total base station power, including HS-PDSCH and HS-SCCH 
a = downlink orthogonality factor 
G = geometry factor 


Example 17.13 
Estimate the average SINR of HSDPA when the maximum transmit power of 
DSCH is 5.5W and total base station power is 18 №. Use а and С as 0.2 and 
0.363, respectively. 
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Solution 
From Equation 17.27: 


SINR = 16 x 5.5 = 1.3753 (1.4 dB) 


181 -0.2 +4, | 


17.7 l,p Interface Dimensioning 
In the UMTS, the I„p interface (see Chapter 15) is dimensioned to carry expected 


user traffic between a BTS (node B) and an RNC including overheads from signal- 
ing, O&M, ATM, etc. 


I,» bandwidth = expected traffic X (1 + burstiness) X (1 + signaling overhead 
+ O&M overhead) X (1 + ATM overhead) 
= (1 + 0.25) X (1 + 0.1 + 0.1) X (1 + 0.2) ~ 1.8 expected traffic 


Example 17.14 

If each BTS supports 350 users and generates a busy hour traffic of 1.785 kbps 
including soft handoff and if an RNC supports 180 BTSs, what is the required 
bandwidth of the I„p interface? 


Solution 
I„p bandwidth = 1.8 x 1.785 x 350 = 1,125 Mbps (use one T1 providing 
1.5 Mbps) 1000 


Total I,5 bandwidth = 180 х 1.125 = 202.42 Mbps 


17.8 Radio Network Controller Dimensioning 

In the initial planning phase, it is assumed that sites are distributed uniformly 
across an RNC area and carry roughly the same amount of traffic. The purpose 
of RNC dimensioning is to establish the number of RNCs needed to support 
the estimated traffic. Several limitations on RNC capacity exist and any of the 
following Equations 17.28 to 17.30 must be taken into account, of which the 
most demanding one should be selected. 


numRNCs — numCells (17.28) 
cellsRNC х fillrate1 


where: 
numCells = number of cells in the coverage area 
cellsRNC — maximum number of cells that can be connected to one RNC 
fillratel = margin used as a backoff from the maximum capacity 
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RNCs = numBT'Ss 17.29 
Rum eS btsRNC X fillrate2 ( ) 


where: 
numBTSs = number of BTSs in the area to be dimensioned 
btsRNC = maximum number of BTSs that can be connected to one RNC 
fillrate2 = margin used as a backoff from the maximum capacity 


The number of RNCs to support the І, throughput is calculated as 


numRNCs = VoiceTP + CSdataTP + PSdataTP L hunsibs (17.30) 
tpRNC x fillrate3 


where: 
tpRNC = maximum I, capacity 
fillrate3 = margin used as backoff from the maximum capacity 
numSubs = expected number of simultaneously active subscribers 
VoiceErl, CSdataErl = expected amount of Erlangs per subscriber 
avePSdata/PSoverhead = Layer 2 data rate + overhead introduced by frame 
protocol (FP) [including retransmission overhead (10%) and layer 2 + FP 
overhead (5%)] 
SHOvwoice + SHOcsdata + SHOpsdata = overhead due to SHO, typically 30-4096 
VoiceTP = VoiceErl X bitratevoice X (1 + SHOvoice) 
CSdataTP = CSdataErl X bitratecsdata X (1 + SHOcsdata) and 
PSdataTP = PSdata/PSoverhead X (1 + SHOpsdata) 


Example 17.15 
In a certain area of a WCDMA system, there are 800 BTSs. Each BTS has three 
sectors with two frequencies used per sector. Find the required RNCs using the 
following data: 

e Maximum capacity of cellRNC: 1152 cells 

* One RNC can support btsRNC: 384 BTSs 

e Voice service: VoiceErl = 25 mErl/subscriber; bitrateyoice=16 kbps 

e CS data service 1: CSErl = 10mErl/subscriber; bitratecsdata = 32 kbps 

* CS data service 2: CSErl = 5mErl/subscriber; bitratecsdata = 64 kbps 

e PS data service: avePSdata = 0.2 kbps per subscriber, PSoverhead = 15% 

* SHO factor = 40% 

* Total subscribers = 350,000 

e Maximum [,, capacity of tpRNC = 196 Mbps 

• fillrate1, fillrate2, and fillrate3 = 90% 
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Solution 


КМС, оашгей = os х2 = 4.63 


RNC required = MP = 2.32 


0.025 x 16 + 0.01 x 32 + 0.005 x 64 + 2.2. - (1 + 0.4) - 350,000 


RNC required = 196,000 x 0.9 


= 4.63 = 5 
Use 5 КМС. 


17.9 Summary 

In this chapter we discussed the network planning aspects of the GSM, cdma2000, 
WCDMA, cdma2000 1X EV-DO, and the HSDPA network. We demonstrated 
procedures for calculating cell coverage based on link budget calculations. We 
focused mainly on the dimensioning phase that is used to estimate the approximate 
number of cell sites required, base station configurations, and number of other 
network elements to determine the projected costs and associated investments. We 
concluded the chapter by providing additional details for cdma2000 1X EV-DO 
and UMTS HSDPA systems. Due to the significant reverse link overhead incurred 
to improve the efficiency of the forward link in cdma2000 1X EV-DO, in practical 
scenarios the reverse link may become the limiting factor. In such scenarios, the 
conventional methods for load estimation, e.g., based on total received power plus 
the thermal noise floor used to drive a slow rate control, are not suitable. A more 
reliable fast method (based on DRC) for fast rate control should be used. 


Problems 
17.1 Why is average SINR useful in HSDPA DL link budget calculations? 


17.2 What is the pole capacity of a cell? 


17.3 A GSM network serving 100K subscribers in an urban area is to be 
replaced by a WCDMA network. In the GSM, each subscriber generates 
0.01 Erlang voice traffic during busy hour. Determine the number 3 sector 
cell sites for WCDMA at 2% GoS using the following data: 
e Allowable E,/N; for voice: 4dB 
* Information rate: 14.4kbps 
* Interference due to other cells: 0.67 
* Power control efficiency: 0.80 
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* Channel activity factor: 0.5 

e 3-sector antenna gain: 2.56 

* Total available spectrum for the WCDMA network: 10 MHz 
e Spreading rate in WCDMA: 3.84 Mcps 


17.4 A 3-sector WCDMA BTS supports 80 subscribers per cell (sector). 
During a busy hour on an average each subscriber transmits 2.5 
megabytes data at 384 kbps and makes two voice calls with an aver- 
age call holding time of 120 seconds. Determine the uplink loading 
of the BTS using the following data: chip rate — 3.84 Mcps, required 
(E,/N;) for voice = 4dB, required (Ej/N;) for data = 2dB, channel 
activity for voice — 0.5 and for data — 1.0, information rate for 
voice — 12.2kbps, interference factor from other cells — 0.67, and 
3-sector antenna gain — 2.55. 


17.5 Calculate downlink throughput for data service only for a WCDMA 
cell using the following information: required (Ej/N;) = 1dB, required 
interference margin — 3dB, average interference factor from other 
cells = 0.5, orthogonality factor = 0.6, and channel activity factor = 1. 
How many users can be supported if the average data traffic per user 
during the busy hour is 48kbps? 


17.6 A WCDMA system is required to serve 80% voice and 20% data users 
simultaneously. The cell loading is to be maintained at 70%. Using the 
following data, calculate the number of voice and data users in the cell: 


• Spreading rate: 3.84 Mcps 
e Information rate for voice: 14.4 kbps 
e Information rate for data: 64 kbps 
* Channel activity for voice: 0.6 
* Interference factor from other cells: 0.67 
* Power control accuracy: 0.80 
* EUN, required for voice service: 3 dB 
e EUN, required for data service: 2dB 
• 3-sector antenna gain: 2.55 
* Total spectrum available: 5 MHz 
17.7 What is the maximum path loss for HSDPA service using the following data? 
e HSDPA transmission power, (Pix)pscH = 5 № 
e Base station antenna gain = 16.5 dBi 
e Base station cable and connector loss = 3 dB 
* Mobile receiver noise figure — 7dB 
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* Planned DL load = 75% 
e Minimum SINR required = 2.5 dB 
e Service processing gain = 12 dB 
* Rxantenna gain — 2dBi 
• Body loss = 2dB 
e Lognormal fading margin = 10dB 
e Building penetration loss = 16dB 
Your mobile phone company is given a contract to build a WCDMA network 
to cover an urban area of 1000 km?. The following are the system data: 
* Maximum transmit power of base station: 20 W 
e Maximum transmit power of mobile station: 200 mW 
e Base station antenna gain: 18 dBi 
e Mobile antenna gain: 0 dBi 
• Base station cable + connector loss: 2 dB 
* Base station noise figure: 6dB 
* Mobile station noise figure: 8dB 
e Fast fading margin: 4 dB 
* Soft handover gain: 2dB 
e Lognormal fading: 8.5 dB 
e Building penetration loss: 0 dB 
* Required Ej/No: 4dB 
e Thermal noise density: — 174 dBm/Hz 
* Information rate per subscriber: 14.4 kbps 
* Average call holding time during busy hour: 100sec per subscriber 
e Average busy-hour traffic per subscriber: 0.03 Erlangs 
e GoS: 2% blocking 
• Roll-out time for network: 5 years 
e Present population: 200K 
e Market penetration: 50% 
* Projected population growth rate: 596 per year 
• One-km intercept path loss in urban area: 125 dB/km 
e Slope of path-loss curve (y): 4.5 
Assume the following data: 
* Channel activity factor = 0.5 
* Power control accuracy: 80% 
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e Interference factor due to other cells: 0.67 

e Sector efficiency for a 3-sector antenna: 0.85 

* 10% overlaying of cells to allow cell breathing 

* 1.0 handover per call with 70% intra- and 30% inter-RNC handover 


The following are the equipment limits: 


e MSC capacity 200K BHCA; maximum connections 6 RNCs 
* RNC capacity 2400 Erlangs; maximum connections 20 BTSs 
e НІК: maximum capacity 400K customers 
e VLR: maximum capacity 300K customers 


Note: VLR can be shared by MSCs. 


Determine the cell radius and number of required BTSs, RNCs, MSCs, 
VLRs, and HLRs for the network. 
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CHAPTER 18 


Wireless Application Protocol 


18.1 Introduction 

Wireless application protocol (WAP)[1, 2] is a set of protocols that allows wireless 
devices such as cell phones, PDAs, and two-way radios to access the Internet. It is 
designed to work with small screens and with limited interactive controls. WAP 
incorporates wireless markup language (WML)[15], which is used to specify the 
format and presentation of text on the screen. WAP is a standard developed by 
the WAP forum (now the open mobile alliance (OMA)), and defines a commu- 
nications protocol as well as an application environment. It is a standardized 
technology for cross-platform, distributed computing. WAP is very similar to the 
combination of hyper text markup language (HTML) and hyper text transport 
protocol (HTTP) except that it adds one very important feature: optimization 
for low-bandwidth, low-memory, and low-display capability environment. These 
types of environments include PDAs, wireless phones, pagers, and virtually any 
other communications device. 

The imode is a proprietary mobile Internet service provider (ISP) and portal 
service from NTT DoCoMo, Japan. In this chapter we focus on WAP and discuss 
WAP programming model, WAP protocol stack, and WAP architecture. The goal 
of imode and its protocol stack is also presented and compared with the WAP. 


18.2 WAP and the World Wide Web (WWW) 


From a certain viewpoint, the WAP approach to content distribution and the web 
approach are virtually identical in concept. Both concentrate on distributing con- 
tent to remote devices using inexpensive, standardized client software. Both rely 
on back-end servers to handle user authentication, database queries, and inten- 
sive processing. Both use markup languages derived from standard generalized 
markup language (SGML) for delivering content to the client. In fact, as WAP 
continues to grow in support and popularity, it is highly likely that WAP applica- 
tion developers will make use of their existing web infrastructure (in the form of 
application servers) for data storage and retrieval. WAP allows a further extension 
of the concept as existing “server” layers can be reused and extended to reach out 
to the vast array of wireless devices in business and personal use today. Extensible 
markup language (XML), as opposed to HTML, contains no screen formatting 
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instructions; instead, it concentrates on returning structured data that the client 
can use as it sees fits. 


18.3 Introduction to Wireless Application Protocol 

WAP has become the defacto global industry standard for providing data to 
wireless hand-held mobile devices[3-9]. WAP takes a client server approach and 
incorporates a relatively simple microbrowser into the mobile phone, requiring 
only limited resources on mobile phones. WAP puts the intelligence in the WAP 
Gateways while adding just a microbrowser to the mobile phones themselves. 
Microbrowser-based services and applications reside temporarily on servers, not 
permanently in phones. The WAP is aimed at turning mass-market phones into 
a network-based smart phone. The philosophy behind WAP’s approach is to use 
as few resources as possible on the hand-held device and compensate for the con- 
straints of the device by enriching the functionality of the network. 

WAP specifies a thin-client microbrowser using a new standard called wire- 
less markup language (WML) that is optimized for wireless hand-held mobile 
devices. WML is a stripped down version of HTML. 

WAP specifies a proxy server that acts as a gateway between the wireless 
network and the wireline Internet, providing protocol translation and optimizing 
data transfer for the wireless handset. WAP also specifies a computer-telephony 
integration application programming interface (API), called wireless telephony 
application interface (WTAI), between data and voice. This enables applications 
to take full advantage of the fact that this wireless mobile device is most often a 
phone and a mobile user's constant companion. On-board memory on a WAP 
phone can be used for off-line content, enhanced address books, bookmarks, and 
text input methods. 

The importance of WAP can be found in the fact that it provides an evo- 
lutionary path for application developers and network operators to offer their 
services on different network types, bearers, and terminal capabilities. The design 
of the WAP standard separates the application elements from the bearer being 
used. This helps in the migration of some applications from short message service 
(SMS) or circuit-switched (CS) data to general packet radio service (GPRS), for 
example. WAP 1.0 was optimized for early WAP-phones. 

The wireless application protocol cascading style sheet (WAP CSS) is the 
mobile version of a cascading style sheet. It is a subset of CSS2 (the cascading style 
sheet language of the world wide web) plus some WAP specific extensions. CSS2 
features and properties that are not useful for mobile Internet applications are 
not included in WAP CSS. WAP CSS is the companion of XHTML Mobile Profile 
(XHTML MD). Both of them are defined in the WAP 2.0 specification, which was 
created by the WAP forum. XHTML MP is a subset of XHTML, which is the 
combination of HTML and XML. There are many WAP 2.0-enabled cell phones 
on the market currently. 
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Before creating WAP 2.0, developers used WML to build WAP sites 


and HTML/XHTML/CSS to build web sites. Now with WAP 2.0 they can 
make use of the same technologies to create both web sites and WAP sites. 
Documents written in XHTML MP/ WAP CSS are viewable on ordinary 
PC web browsers, since XHTML MP and WAP CSS are just the subsets of 
XHTML and CSS. 


The following are the goals of wireless application protocol: 


Independent of wireless network standards 


Interoperability: Terminals from different manufacturers must be able to 
communicate with services in the mobile network 


Adaptation to bounds of wireless networks: Low bandwidth, high latency, 
less connection stability 


Adaptation to bounds of wireless devices: Small display, limited input facilities, 
limited memory and CPU, limited battery power 


Efficient: Provide quality of service (QoS) suitable to the behavior and 
characteristics of the mobile world 


Reliable: Provide a consistent and predictable platform for deploying services 


Secure: Enable services to be extended over potentially unprotected mobile 
networks while preserving the integrity of data 


Applications scale across transport options 
Applications scale across device types 


Extensible over time to new networks and transport 


WAP is envisaged as a comprehensive and scalable protocol designed for 


use with: 


Any mobile device from those with a one-line display to a smart phone 


Any existing or planned wireless service such as the SMS, circuit-switched 
data, unstructured supplementary services data (USSD) and GPRS 

Any mobile network standard such as code division multiple access (CDMA), 
global system of mobile communications (GSM), or universal mobile tele- 
phone system (UMTS). WAP has been designed to work with all cellular 
standards and is supported by major worldwide wireless leaders such as 
AT&T wireless and NTT DoCoMo. 


Multiple input terminals such as keypads, keyboards, touch-screens, etc. 


18.4 The WAP Programming Model 
Before presenting the WAP programming model, we briefly discuss the world wide 
web (WWW) model that is the basis for the WAP model. 
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18.4.1 Тһе WWW Model 
The Internet WWW architecture provides a flexible and powerful programming 
model. Applications and content are presented in standard data formats, and are 
browsed by applications known as web browsers. The web browser is a network 
application, i.e., it sends requests for named data objects to a network server and 
the network server responds with encoded data using the standard formats. 

The WWW standards specify several mechanisms necessary to build a 
general-purpose application environment which includes: 


* Standard naming model. All servers and content on the WWW are named 
with an Internet-standard Uniform Resource Locator (URL) 


* Content typing. All content on the WWW is given a specific type, thereby 
allowing web browsers to correctly process the content based on its type 


* Standard content formats. All web browsers support a set of standard 
content formats. These include (HTML), JavaScript scripting language 
(ECMAScript, JavaScript), and a large number of other formats 


* Standard protocols. Standard networking protocols allow any web browser 
to communicate with any web server. The most commonly used protocol 
on the WWW is the HTTP. This infrastructure allows users to easily reach a 
large number of third-party applications and content services. It also allows 
application developers to easily create applications and content services for 
a large community of clients. 


The WWW protocols define three classes of servers: 


1. Origin server — The server on which a given resource (content) resides or 
is to be created 


2. Proxy— An intermediary program that acts as both a server and a client 
for the purpose of making requests on behalf of other clients. The proxy 
typically resides between clients and servers that have no means of direct 
communication, e.g., across a firewall. Requests are either serviced by a 
proxy program or passed on with possible translation to other servers. 
A proxy must implement both the client and server requirements of WWW 
specifications. 


3. Gateway — А server which acts as an intermediary for some other server. 
Unlike a proxy, a gateway receives requests as if it were the origin server 
for the requested resource. The requesting client may not be aware that it 
is communicating with a gateway. 


18.4.2 The WAP Model 

The WAP programming model (see Figure 18.1) is similar to the WWW 
programming model. This provides several benefits to the application developer 
community, including a familiar programming model, a proven architecture, 
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Figure 18.1 WAP programming model. 


and the ability to leverage existing tools (e.g., web servers, XML tools, etc.). 
Optimization and extensions have been made in order to match the characteris- 
tics of the wireless environment. Wherever possible, existing standards have been 
adopted or have been used as the starting point for the WAP technology. 

WAP content and applications are specified in a set of well-known content 
formats based on WWW content formats. Content is transported using a set of 
standard communication protocols based on WWW communication protocols. 
A microbrowser in the wireless terminal coordinates the user interface and is analogous 
to a standard web browser. WAP defines a set of standard components that enable 
communication between mobile terminals and network servers, including: 


e Standard naming model. WWW-standard URLs are used to identify WAP 
content on origin servers. WWW-standard URLs are used to identify local 
resources in a device, e.g., call control functions 


* Content typing. All WAP content is given a specific type consistent with 
WWW typing. This allows WAP user agents to correctly process the content 
based on its type. 


* Standard content formats. WAP content formats are based on WWW technol- 
ogy and include display markup, calendar information, electronic business 
card objects, images, and scripting language. 

* Standard protocols. WAP communication protocols enable the communi- 
cation of browser requests from the mobile terminal to the network web 
server. The WAP content types and protocols have been optimized for mass 
market, hand-held wireless devices. WAP utilizes proxy technology to con- 
nect between the wireless domain and the WWW. 


The WAP proxy typically comprises the following functionality: 


* Protocol gateway: The protocol gateway translates requests from the WAP 
protocol stack to the WWW protocol stack (HTTP and TCP/IP). 
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* Content encoders and decoders: The content encoders translate WAP 


content into compact encoded formats to reduce the size of data over the 
network. This infrastructure ensures that mobile terminal users can browse 
a wide variety of WAP content and applications, and that the application 
author is able to build content services and applications that run on a large 
base of mobile devices. The WAP proxy allows content and applications 
to be hosted on standard WWW servers and to be developed using proven 
WWW technologies such as cell global identity (CGI) scripting. While the 
nominal use of WAP includes a web server, WAP proxy, and WAP client, 
WAP architecture can easily support other configurations. It is possible to 
create an origin server that includes WAP proxy functionality. Such a server 
might be used to facilitate end-to-end security solutions, or applications 
that require better access control or a guarantee of responsiveness. 


18.5 WAP Architecture 


WAP architecture [10-14] provides a scalable and extensible environment for the 
application development of mobile communication devices. This is achieved using 
a layered design of the entire protocol stack (see Figure 18.2). Each of the layers of 
architecture is accessible by layers above, as well as by other services and applica- 
tions. WAP layered architecture enables other services and applications to utilize the 
features of the WAP stack through a set of well-defined interfaces. External appli- 
cations may access the session, transaction, security, and transport layers directly. 
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Figure 18.2 WAP architecture. 
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The layered design and functions of the WAP protocol stack resemble the 
layers of the open system interconnection model. In Figure 18.3, WAP and Internet 
protocol stacks are compared. The following sections provide a description of the 
various elements of the WAP protocol. 


18.5.1 Wireless Application Environment 

The uppermost layer in the WAP stack, the wireless application environment 
(WAE), is a general-purpose application environment based on a combination 
of WWW and mobile telephony technologies. The primary objective of the WAE 
is to establish an interoperable environment that allows operators and service 
providers to build applications and services that can reach a wide variety of 
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Figure 18.3 WAP and Internet protocol stacks. 
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different wireless platforms in an efficient and useful manner. Various components 


of the WAE are: 


Addressing model: WAP uses the same addressing model as the one used 
on the Internet, i.e., URL. A URL uniquely identifies a resource on a server 
that can be retrieved using well-known protocols. WAP also uses Uniform 
Resource Identifiers (URI). A URI is used for addressing resources that are 
not necessarily accessed using known protocols. An example of using a URI 
is local access to a wireless device's telephony functions. 


Wireless markup language: WML is WAP's analogy to HTML and is based 
on XML. It is WAP's answer to problems such as creating services that fit on 
small hand-held devices, low bandwidth wireless bearers, etc. WML uses a 
deck/card metaphor to specify a service. A card is typically a unit of inter- 
action with the user, i.e., either presentation of information or request for 
information from the user. A collection of cards is called a deck, which usu- 
ally constitutes a service. This approach ensures that a suitable amount of 
information is displayed to the user simultaneously since inter-page naviga- 
tion can be avoided to the maximum possible extent. Key features of WML 
include variables, text formatting features, support for images, support for 
soft-buttons, navigation control, control of browser history, support for 
event handling (e.g., telephony services) and different types of user interac- 
tions (e.g., selection lists and input fields). One of the key advantages of 
WML is that it can be binary encoded by the WAP Gateway/Proxy in order 
to save bandwidth in the wireless domain. 


WMLScript: WMLScript is used for enhancing services written in WML. 
WMLScript can be used for validation of user input. Since WML does not 
provide any mechanisms for achieving this, a round trip to the server would 
be needed in order to determine whether user input is valid if scripting 
was not available. Access to local functions in a wireless device is another 
area in which WMLScript is used (for example, access to telephony related 
functions). WMLScript libraries contain functions that extend the basic 
WMLScript functionality. This provides a means for future expansion of 
functions without having to change the core of WMLScript. Just as with 
WML, WMLScript can be binary encoded by the WAP Gateway/Proxy in 
order to minimize the amount of data sent over the air. 


18.5.2 Wireless Telephony Application 
The wireless telephony application (WTA) environment provides a means to create 
telephony services using WAP. WTA utilizes a user-agent, which is based on the 
WML user-agent, but extends its functionality that meets special requirements for 
telephony services. This functionality includes: 


18.5 WAP Architecture 639 


* Wireless telephony application interface (WTAI): An interface toward a set of 
telephony-related functions in a mobile phone that can be invoked from WML 
and/or WMLScript. These functions include call management, handling of 
text messages, and phone book control. WTAI enables access to functions that 
are not suitable for allowing common access to them, e.g., setting up calls and 
manipulating the phone book without user acknowledgment. 


* Repository: Since it is not feasible to retrieve content from a server every 
now and then, repository makes it possible to store WTA services in the 
device in order to enable access to them without accessing the network. 


* Event Handling: Typical events in a mobile network are incoming calls, 
call disconnect, and call answered. The event handling within WTA enables 
WTA services stored in the repository to be started in response to such 
events. 


* WTA service indication: It is a content type that allows a user to be noti- 
fied about events of different kinds (e.g., new voice mails) and be given the 
possibility to start the appropriate service to handle the event. In the most 
basic form, the WTA service indication makes it possible to send a URL and 
a message to a wireless device. 


The WTA framework relies on a dedicated WTA user-agent to carry out 
these functions. Only trusted content providers should be able to make content 
available to the WTA user-agent. Thus, it must be possible to distinguish between 
servers that are allowed to supply the user-agent with services containing these 
functions and those who are not. To accomplish this, the WTA user-agent retrieves 
its services from the WTA domain, which, in contrast to the Internet, is controlled 
by the network operator. WTA services and other services are separated from each 
other using WTA access control based on port numbers. 


18.5.3 Wireless Session Protocol 
Wireless session protocol (WSP) provides a means for the organized exchange of 
content between cooperating client/server applications. Its functions are to: 


• Establish a reliable session from the client to the server and release the session 
in an orderly manner. 


* Agree on a common level of protocol functionality using capability 
negotiation. 


* Exchange content between client and server using compact encoding. 
* Suspend and resume the session. 

* Provide HTTP 1.1 functionality. 

e Exchange client and server session headers. 
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* Interrupt transactions in process. 
* Push content from server to client in an unsynchronized manner. 


* Negotiate support for multiple, simultaneous asynchronous transactions. 


The core of the WSP design is a binary form of HTTP. Consequently, all 
methods defined by HTTP 1.1 are supported. In addition, capability negotiation 
can be used to agree on a set of extended request methods, so that full compat- 
ibility to HTTP applications can be retained. HTTP content headers are used to 
define content type, character set encoding, language, etc., in an extensible man- 
ner. However, compact binary encoding is defined for the well-known headers to 
reduce protocol overhead. 

The life cycle of a WSP is not tied to the underlying transport protocol. 
A session can be suspended while the session is idle to free up network resources 
or save battery power. A lightweight session re-establishment protocol allows the 
session to be resumed without the overload of full-blown session establishment. 
A session may be resumed over a different bearer network. 

WSP allows extended capabilities to be negotiated between peers (as an 
example this allows for both high-performance, feature-full implementation as 
well as simple, basic, and small implementations). WSP provides an optimal 
mechanism for attaching header information to the acknowledgment of a trans- 
action. It also optionally supports asynchronous requests so that a client can sub- 
mit multiple requests to the server simultaneously. This improves utilization of 
air time and latency as the result of each request can be sent to the client when it 
becomes available. 


18.5.4 Wireless Transaction Protocol 

Wireless transaction protocol (WTP) does not have security mechanisms. WTP 
has been defined as a light-weight transaction-oriented protocol that is suitable 
for implementation in “thin” clients and operates efficiently over wireless data- 
gram networks. Reliability is improved through the use of unique transaction 
identifiers, acknowledgments, duplicate removal, and retransmissions. There is 
an optional user-to-user reliability function in which WTP user can confirm every 
received message. The last acknowledgment of the transaction, which may con- 
tain out-of-band information related to the transaction, is also optional. WTP has 
no explicit connection set-up or tear-down phases. This improves efficiency over 
connection-oriented services. The protocol provides mechanisms to minimize the 
number of transactions being replayed as a result of duplicate packets. 

Wireless transaction protocol is designed for services oriented toward trans- 
actions, such as browsing. The basic unit of interchange is an entire message and 
not a stream of bytes. Concatenation may be used, where applicable, to convey 
multiple packet data units (PDUs) in one service data unit (SDU) of the data- 
gram transport. WTP allows asynchronous transactions. There are three classes 
of transaction service: 
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* Class 0: Unreliable “send” with no result message. No retransmission if the 
sent message is lost. 


* Class 1: Reliable *send" with no result message. The recipient acknowledges 
the sent message; otherwise the message is resent. 


* Class 2: Reliable “send” with exactly one reliable result message. A data 
request is sent and a result is received which is finally acknowledged by the 
initiating part. 


Note: For reliable *send," both success and failure is reported 


18.5.5 Wireless Transport Layer Security 

The purpose of wireless transport layer security (WTLS) is to provide transport 
layer security between a WAP client and the WAP Gateway/Proxy. WTLS is a 
security protocol based on the industry standard transport layer security (TLS) 
protocol with new features such as datagram support, optimized handshake, and 
dynamic key refreshing. The WTLS layer is modular and depends on the required 
security level of the given application, or characteristics of the underlying network, 
whether it is used or not. WILS is optional and can be used with both the con- 
nectionless and the connection mode WAP stack configuration. In addition, WTLS 
provides an interface for managing secure connections. The primary goal of WTLS 
is to provide the following features between two communicating applications: 


* Data integrity: WTLS contains facilities to ensure that data sent between 
the terminal and an application server is unchanged and not corrupted. 


* Privacy: WTLS contains facilities to ensure that data transmitted between 
the terminal and an application server is private and cannot be understood 
by any intermediate parties that may have intercepted the data stream. 


* Authentication: WTLS contains facilities to establish the authenticity of the 
terminal and application server. 


* Denial-of-service protection: WTLS contains facilities for detecting and 
rejecting data that is replayed or not successfully verified. WTLS makes 
many typical denial-of-service attacks harder to accomplish and protects 
the upper protocol layers. 


WTLS protocol is optimized for low-bandwidth bearer networks with rela- 
tively long latency. These features make it possible to certify that the sent data 
have not been manipulated by a third party, that privacy is guaranteed, that an 
author of a message can be identified, and that both parties cannot falsely deny 
having sent their messages. 


18.5.6 Wireless Datagram Protocol 
Wireless datagram protocol (WDP) offers a consistent service to the upper layer 
protocols of WAP and communicates transparently over one of the available 
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bearer services. The services offered by WDP include application addressing 
by port numbers, optional segmentation and reassembly, and optional error 
detection. 

WDP supports several simultaneous communication instances from a higher 
layer over a single underlying WDP bearer service. The port number identifies the 
higher layer entity above the WDP. Reusing the elements of the underlying bearers 
and supporting multiple bearers, WDP can be optimized for efficient operation 
within the limited resources of a mobile device. 

The WDP adaptation layer is the layer of the WDP that maps the WDP 
functions directly onto a specific bearer. The adaptation layer is different for each 
bearer and deals with the specific capabilities and characteristics of that particu- 
lar bearer service. At the gateway, the adaptation layer terminates and passes the 
WDP packets on to a WAP proxy/server via a tunneling protocol. 

If WAP is used over a bearer UDP, the WDP layer is not needed. On other 
bearers, such as GSM SMS, the datagram functionality is provided by WDP. This 
means that WAP uses a datagram service, which hides the characteristics of differ- 
ent bearers and provides port number functionality. 

Processing errors can occur when the WDP datagrams are sent from one 
WDP provider to another. For example, a wireless data gateway is unable to send 
a datagram to the WAP gateway, or the receiver does not have enough buffer 
space to receive large messages. The wireless control message protocol (WCMP) 
provides an efficient error handling mechanism for WDP. 


18.5.7 Optimal WAP Bearers 

The WAP is designed to operate over a variety of different services, including 
SMS, circuit switched data (CSD), and packet switched data (PSD). The bearers 
offer differing levels of quality of service with respect to throughput, error rate, 
and delays. The WAP is designed to compensate for or tolerate these varying levels 
of service: 


* Short message service (SMS): Given its limited length of 160 characters per 
short message, the overhead of the WAP that would be required to be trans- 
mitted in an SMS message would mean that even for the simplest of transac- 
tions several SMS messages may have to be sent. 

Circuit switched data (CSD): Most of the trial-based services use CSD as 
the underlying bearer. CSD lacks immediacy—a dial-up connection taking 
about 10 seconds is required to connect the WAP client to the WAP gate- 
way; and this is the best case scenario when there is a complete end-to-end 
digital call. 

Unstructured supplementary services data (USSD): USSD is a means of 
transmitting information or instructions over a GSM network. In USSD 
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a session is established and the radio connection stays open until the user, 
application, or time-out releases it. USSD text messages can be up to 182 
characters in length. USSD can be an ideal bearer of WAP on GSM net- 


works. USSD is preferable due to the following advantages: 


* Turnaround response times for interactive applications are shorter for 


USSD. 


* Users need not access any particular phone menu to access services with 
USSD but they can enter the command directly from the initial mobile 
phone screen. 


* General packet radio service (GPRS): GPRS is a new bearer because it is 
immediate, relatively fast, and supports virtual connectivity, allowing rel- 
evant information to be sent from the network as and when it is generated. 
There are two efficient means of delivering proactively sending (pushing) 
content to a mobile phone: by SMS (which is, of course, one of the WAP 
bearers) or by the user maintaining more or less a permanent GPRS ses- 
sion with the content server. WAP incorporates two different connection 
modes — WSP connection mode or WSP connection protocol. This is similar 
to the two GPRS point-to-point services— connection oriented and connec- 
tionless. For the interactive menu-based information exchanges that WAP 
anticipates, GPRS and WAP can be ideal bearers for each other. 


18.6 Traditional WAP Networking Environment 


WAP allows the presentation and delivery of information and services to wire- 
less devices such as mobile telephone or hand-held computer. The major play- 
ers in WAP space are the wireless service provider (WSP) and the enterprise (see 
Figure 18.4). The WSP is the wireless equivalent of an Internet service provider 
(ISP). The role of the WSP is to provide access to back-end resources for wireless 
users. The WSP provides additional service because wireless users must transition 
from a wireless to a wired environment (unlike an Internet environment where 
the user is already “on” on the Internet). The WSP's space contains a modem 
bank, remote access service (RAS) server, router, and potentially a WAP gateway. 
The environment is similar to the wired environment, where all connection type 
services are provided by the WSP. The WSP handles the processing associated 
with incoming WAP communications, including the translation of wireless com- 
munication from the WAP device through the transmission towers to a modem 
bank and RAS and on to the WAP gateway. The modem bank receives incoming 
phone calls from the user's mobile device, the RAS server translates the incom- 
ing calls from a wireless packet format to a wired packet format, and the router 
routes these packets to correct destinations. The WAP gateway is used to translate 


644 18 Wireless Application Protocol 


Modem Bank Router 
and 
RAS 


Wireless Service Provider 


Web Server 


bah балаа ка See 


Enterprise 


Figure 18.4 Traditional WAP networking environment. 


the WAP into traditional Internet protocol (TCP/IP). The WAP gateway is based 
on proxy technology. Typical WAP gateways provide the following functionality: 


* Domain name server (DNS) service, for example, to resolve domain names 
used in URLs. 


* A control point for management of fraud and service utilization. 


* Act as a proxy, translating the WAP protocol stack to the Internet protocol 
stack. 


Many gateways also include a transcoding function that will translate an 
HTML page into a WML page that is suited to a particular device type. The 
enterprise space contains the backed web and application servers that provide the 
enterprises's transactions. Generally, the WSP maintains and manages the WAP 
gateway, but there are circumstances under which this is not desirable. This is 
due to the presence of an encryption gap caused by the ending of the WTLS ses- 
sion at the gateway. The data is temporarily in clear text on the gateway until it is 
re-encrypted under the SSL session established with the enterprise's web server. In 
such cases, the WAP gateway should be maintained at the enterprise. The problem 
with this solution is the absence of the DNS client at the mobile device, which 
would require the storage of profiles for every target on the mobile device. This 
also requires that the enterprise set up a relationship with service provider whereby 
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all incoming packets destined for the enterprise (identified by the IP address) are 
immediately routed by the WSP directly to the enterprise and are never sent to the 


WSP’ 


s gateway. 


18.7 WAP Advantages and Disadvantages 
The following are the advantages of WAP: 


Implementation near to the Internet model 
Most modern mobile telephone devices support WAP 
Real-time send/receive data 


Multiplatform functionality (little change is needed to run on any web site 
since XML is used) 


No hardware obsolescence 


The following are some of the advantages of using WAP CSS on mobile 


Internet sites: 


Because of WAP 2.0 (XHTML MP/WAP CSS), web programming and WAP 
programming converge. Learning WAP programming does not require 
much effort if you already know how to program the web. Web developers 
can continue to use their familiar web authoring tools and PC web browsers 


for building mobile Internet sites. This is one major advantage of XHTML 
MP/WAP CSS over WML. 


You can have greater control on the appearance of WAP pages with WAP CSS 
than with WML. For example, you can specify the colors, fonts, background, 
borders, margins, and padding of various elements with WAP CSS. 


If you apply a single cascading style sheet to the whole mobile Internet site, 
a mobile device will download the cascading style sheet only once the first 
time the mobile Internet site is visited. The cascading style sheet will then 
be stored in the cache and it can be accessed later without connecting to the 
server. 


The file sizes of XHTML MP documents can become smaller if the layout 

and formatting information is moved to an external WAP CSS style sheet. 

A small file size has the advantage of a shorter download time. 

Using WAP CSS has the advantage that the content and presentation can be 

separated. This means you can: 

e Match the layout and style of the same content to the characteristics of 
different wireless devices easily 


e Match the layout and style of the same content for different user agents 
easily 
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* Minimize the effort to maintain a WAP site. When new mobile phone 
models come onto the market, you can write new WAP CSS style sheets 
to optimize the layout of the WAP site on these new mobile phones. The 
content files do not need to be modifed. 

* Apply a single WAP CSS style sheet to multiple WAP pages. Later if you 
want to change the look and feel of the whole WAP site, just modify the 
WAP CSS. 


* Reuse the style code in multiple projects 


* Remotely divide work—someone can focus on look and feel WAP, whereas 
others can concentrate on contents. 


Some of the disadvantages of the WAP are the following: 


Low speeds, security, and very small user interface 
Not very familiar to the users 

Business model is expensive 

Forms are hard to design 

Third party is included 


Some of the disadvantages of using WAP CSS style sheets on mobile Internet 


sites are: 


Different WAP browsers have varied levels of support for WAP CSS. One 
property supported on one WAP browser may not be available on another 
WAP browser. 

An external WAP CSS style sheet can increase the time required for a page 

to be completely loaded the first time the WAP site is visited because of the 

following reasons: 

* The external WAP CSS style sheet does not exist in the cache of the mobile 
phone at the first visit, which means the mobile phone has to download 
it from the server. 

* An XHTML MP document and its external WAP CSS style sheet have to 
be downloaded in separate requests. 

* [f you make use of a single WAP CSS file to specify all the presentation 
information about the mobile Internet site, the file size of the WAP CSS 
file can be quite large. 


* The WAP browser needs to parse the cascading style sheet in addition to 
the XHTML MP document. 


18.8 Applications of WAP 


The first and foremost application of WAP is accessing the Internet from mobile 
devices. This is already in use in many mobile phones. This application is gaining 
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popularity daily, and many web sites already have a WAP version of their site. 
An application, which is out, is sending sale offers to mobile customers through 
WAP. The user’s phone will be able to receive any sale prices and offers from the 
web site of a store. 

Games can be played from mobile devices over wireless devices. This 
application has been implemented in certain countries and is under development 
in many others. This is an application which has been predicted to gain high 
popularity. 

Application to access time sheets and filing expenses claims via mobile hand- 
sets are currently being developed. These applications, when implemented, will be 
a breakthrough in the business world. 

Applications to locate WAP customers geographically have been developed. 
Applications to help users who are lost or stranded by guiding them using their 
locations are under consideration. 

WAP also provides short messaging, e-mail, weather, and traffic alerts based 
on the geographic location of the customer. These applications are available in 
some countries but will soon be provided in all countries. 

One of the biggest applications of WAP under consideration is banking from 
mobile devices. These applications will be very popular if they are implemented 
in a secure manner. 

The mobile industry appears to be moving forward, putting aside the issues 
of network and air interface standards, and instead concentrating on laying the 
foundations for service development, regarded by many as the key driver to multi- 
media on the move and third-generation mobile systems. From that point of view, 
in the near future WAP and Bluetooth will play fundamental roles. 


18.9 imode 
imode is a proprietary mobile ISP and portal service from NTT DoCoMo, Japan, 
with about 50 million subscribers. For imode, DoCoMo adopted the Internet 
model and protocol. imode uses compact HTML (cHTML) as a page descrip- 
tion language. The structure of CHTML means that the user can view traditional 
HTML and imode sites can be inspected with ordinary Internet web browsers. 
This is in contrast to WAP, where HTML pages must be translated to WML. 
imode provides Internet service using personal digital cellular-packet (PDC-P) and 
a subset of HTML 3.0 for content description. 

imode is a packet-switched service (always connected, as long as the user’s 
handset is reached by imode signal) which includes images, animated images, and 
colors. In imode, users are charged per packet of downloaded information. imode 
allows application/content providers to distribute software to cellular phones and 
also permits users to download appilets (e.g., games). imode uses packet-switched 
technology for the wireless part of the communication. The wired part of the 
communication is carried over TCP/IP. 
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Packet-switched services send and receive information by dividing messages 
into small blocks called packets and adding headers containing address and control 
information to each packet. This allows multiple communications to be carried 
on a communication channel, giving efficient channel usage with low cost. Dopa, 
DoCoMo’s dedicated data communications service, offers connections to location 
area network (LAN) and Internet service providers. The mobile packet commu- 
nications system has a network configuration in which a packet communications 
function is added and integrated into PDC, the digital system for portable and 
automobile telephones. DoCoMo has developed a data transmission protocol 
specific to imode. This protocol is used with the PDC-P system. The PDC-P net- 
work includes a mobile message packet gateway (M-PGW) to handle conversions 
between the two protocol formats. Connection between the imode server and the 
Internet uses TCP/IP. The imode server is a regular web server which can reside at 
NTT DoCoMo or at the enterprise. DoCoMo has been acting as a 1717 portal and 
normally maintains the imode server. Figure 18.5 shows the imode protocol stack. 

imode relies on Internet security as provided by SSL/TLS and does not have 
the ability to handle server-side authenticated SSL sessions. imode phones are pre- 
configured with root collision avoidance keys from public key infrastructure. This 
will allow for establishment of a server-side authenticated SSL session between the 
imode device and imode server hosted by the enterprise. imode does not have the 
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Figure 18.5 imode protocol stack. 
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Figure 18.6 imode wireless networking environment. 


capability of handling client-side certificates which means that nonrepudiation is 
not possible with the current implementation of imode. Figure 18.6 shows a typi- 
cal imode wireless networking environment. 


18.10 imode versus WAP 


imode is available only in Japan, whereas Europe and other big markets for 3G 
mobile service providers are completely WAP-based. In the United States, most 
service providers have chosen WAP. 

The most basic difference between imode and WAP is the different graphic 
capabilities; imode only supports simple graphics, which is far more than WAP 
allows. The imode packet-switched data network is more suited for transferring 
data than the WAP circuit-switched network. 

Another major difference is the *always-on" capabilities of imode. Since 
users are not charged for the time they spend on-line, it is more convenient, and 
also less expensive. Since there is no need to dial up before using the various 
IP-based services, e-mail becomes as instant as SMS. 
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imode uses CHTML, a subset of HTML, while WAP uses WML, a subset 
of XML. cHTML, while certainly easier to develop from a web-designer stand- 
point, has its limitations. The downside of WML, on the other hand, is similarly 
obvious—currently a WAP gateway is required to translate between HTML and 
WML for almost every data transfer. On the other hand, since WML is derived 
from XML, it is much more extensible. XML allows for more dynamic content 
and various different applications. In the future, a WML-based service will be of 
more advantage than an HTML-based one. So while WAP may currently require 
more complicated technology, in the long run, it may enable the user to do more 
with his or her device. 


18.11 Summary 


In this chapter we discussed wireless application protocol (WAP). WAP specifies 
a thin-client microbrowser using a new standard called wireless markup lan- 
guage (WML) that is optimized for wireless hand-held mobile devices. WML is a 
stripped-down version of hyper text markup language (HTML). NTT DoCoMo 
imode provides Internet service using PDC-P and a subset of HTML 3.0 for content 
description. imode allows application/content providers to distribute software to 
cellular phones. We concluded the chapter by providing basic differences between 
WAP and imode. 


Problems 
18.1 What is WAP? Discuss briefly. 


18.2 Discuss WAP architecture. 

18.3 What is wireless transport layer security in WAP? 

18.4 What is imode? Discuss briefly. 

18.5 What is WAP 2.0? 

18.6 What are the major differences between WAP and imode? 
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CHAPTER 19 


Wireless Personal Area 
Network—Bluetooth 


19.1 Introduction 

Several technical committees of IEEE are responsible for developing standards of 
the local area network (LAN), wireless local area network (WLAN), and wireless 
personal area network (WPAN). Table 19.1 summarizes them to familiarize the 
readers. 

In a WPAN, the residence is connected to a public switched telephone net- 
work (PSTN) for telephone services, Internet for web access, and cable network 
for multichannel television services. In this chapter, we first introduce the concept 
of WPAN and discuss the roles of the IEEE 802.15[6] committee. We then provide 
details of Bluetooth wireless technology[1,3—5]. 

Bluetooth enables users to connect a wide range of computing and telecom- 
munication devices without any additional or proprietary cables. Ultrawide band 
(UWB-IEEE 802.15.3a) is the IEEE standard for a high-data-rate WPAN designed 
to provide sufficient quality of service for real-time distribution of content such 


Table 19.1 IEEE 802 working groups. 


Working group 


802.1 Higher Layer LAN Protocol 

802.2 Logical Link Control (LLC) 

802.3 Ethernet 

802.11 WLAN 

802.15 WPAN 

802.16 Broadband Wireless Access (BWA) 
802.17 Resilient Packet Ring 

802.18 Radio Regulatory TAG 

802.20 Mobile Broadband Wireless Access (MBWA) 
Link Security Executive Committee Study Group 
802 Handoff Executive Committee Study Group 
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as video and music. It is ideally suited for a home multimedia wireless network. 
We will discuss UWB in Chapter 22. 

The Bluetooth wireless specification includes RE link layer, and application 
layer definitions for product developers for data, voice, and content-centric 
applications. The specification contains the information necessary to ensure that 
diverse devices supporting Bluetooth wireless technology can communicate with 
each other worldwide. 


19.2 The Wireless Personal Area Network 

Within the home, computers and printers are connected to the Internet through voice 
band modems, XDSL services, or cable modems. The number of home networks 
in the United States is expected to almost double each year. The industry has two 
distinct segments—home access and home distribution. Home access technology 
uses different wireless and wired alternatives to secure a broadband Internet access 
to the home gateway to be distributed to the user’s information appliances. The 
home distribution or WPAN interconnects all home appliances and connects them 
to the Internet through a home gateway. It is expected that more than 80% of 
U.S. households will have a broadband data access by the year 2008+. 

The WPAN provides an infrastructure to interconnect a variety of home 
appliances and enables them to access the Internet through a central home gate- 
way. Home computing equipment used for computing and Internet transaction 
interface access includes PCs, laptops, printers, scanners, and web cameras. 
A home computing network allows multiple computers as well as multiple devices 
to connect with a network protocol. 

A wireless personal area network (WPAN) is a short-distance (typically 
«10 m but as far as 20 m) wireless network specially designed to support portable 
and mobile computing devices such as PCs, PDAs, printers, storage devices, cell 
phones, pagers, set-up boxes, and a variety of consumer electronic equipment. 
Bluetooth (IEEE 802.15.1), UWB (IEEE 802.15.3a), and ZigBee (IEEE 802.15.4) 
are examples of РАМ that allow devices within close proximity to join together 
in wireless networks in order to exchange information. Many cell phones already 
have two radio interfaces—one for the cellular network and the other for PAN 
connections. 

WPANS such as Bluetooth provide enough bandwidth and convenience to 
make data exchange practical for certain mobile devices requiring data exchanges 
atrates up to 1 Mbps. Atthe other end of the scale, UWB will provide the capability 
of streaming video signals at data rates up to 1 Gbps. However, many control and 
command applications require much lower data rates and also the lowest possible 
cost, thus ZigBee. At this time most WPAN applications target cable replacements 
(e.g., Bluetooth headsets) but these technologies are capable of forming elegant 
peer-to-peer networks, offering more enhanced application capabilities such as 
sensor networks and so on (see Chapter 22). 
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The IEEE 802.15 committee has the responsibility for developing standards 
for short distance wireless networks used in the networking of portable and 
mobile computing devices such as PCs, PDAs, cell phones, printers, speakers, 
microphones, and other consumer electronics. IEEE 802.15.1 and 802.15.4 focus 
on the devices with the following characteristics: 


* Power management: low current consumption 

* Range: 0-10m 

* Rate: 19.2-100 kbps 

* Size: 0.5 in? without antenna 

* Low cost relative to target device 

* Should allow overlap of multiple networks in the same area 
* Network supports a minimum of 16 devices 


The IEEE 802.15 committee consists of the following task groups (see Figure 19.1): 


* Task group I: It is for Bluetooth and defines physical (PHY) and medium 
access control (MAC) specifications for wireless connectivity with fixed, 
portable, and moving devices within or entering a personal operating space 
(POS). A POS is the space around a person or object that typically extends 
up to 10 m in all directions and envelops the person whether stationary or 
in motion. 

* Task group II: It focuses on the coexistence of WPAN and IEEE 802.11 
WLANs. The goal of the WPAN group is to achieve a level of interoper- 
ability that allows the data transfer between a WPAN device and an IEEE 
802.11 device. 

* Task group III: It works on PHY and MAC layers for high-rate WPANs 
that operate at a data rate of more than 20Mbps, and will provide for 
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BluetoothTM WPAN & WLAN High Rate WPAN Low Rate WPAN 


TG3a 
802.15.3a 
Very High Rate WPAN 


Figure 19.1 IEEE 802.15 task groups. 
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low-power, low-cost solutions to address the needs of portable consumer 
digital imaging and multimedia applications. The standards aim at providing 
compatibility with Bluetooth specifications. 


* Task group IV: It investigates an ultra-low complexity, ultra-low power 
consuming, ultra-low-cost PHY and MAC layer for data rates of up to 
200 kbps. Potential applications are sensors, interactive toys, smart badges, 
remote controls, and home automation. 


19.3 Bluetooth (IEEE 802.15.1) 

In 1994, the Swedish telecommunication company Ericsson decided to honor old, 
weird Herald I. Bluetooth, king of Denmark between 940 апа 985 AD, by naming 
its new wireless networking standard after him. Table 19.2 outlines the evolution 
of Bluetooth technology. 

Bluetooth provides short-range, low-cost («$10 per device) connectivity 
between portable devices. Bluetooth is limited in range («10 meters) and band- 
width (780 kbps compared to Home RF that goes to 1-2 Mbps and IEEE 802.11b 
that goes to 11 Mbps with 150 m and greater distance). 

Bluetooth radio characteristics [8-10] include low power, short range, and 
medium transmission speed. The low power consumption makes Bluetooth ideal 
for small, battery-powered devices like mobile phones and pocket PCs. Bluetooth is 
poised to capitalize on the emerging market of small mobile devices that is expected 
to grow. Bluetooth's short range («10 m) is ideal for the concept of *personal 
operating space" and integrates the notion of using a device carried or worn on the 
body or otherwise located within immediate reach. Bluetooth's transmission speed 
of 780 kbps works well for transferring small to medium-sized files. 

Bluetooth enables users to connect a wide range of computing and tele- 
communication devices easily and simply, without the need to buy additional or 
proprietary cables. The cable solution is complicated since it may require a cable 
specific to the device that is being connected. The infrared solution eliminates the 
cable, but requires line of sight. To solve all these problems the Bluetooth stan- 
dard has been developed. 

The Bluetooth system operates in the 2.4 GHz Industrial Scientific Medicine 
(ISM) band. In a vast majority of countries around the world the range of this 


Table 19.2 Evolution of Bluetooth technology. 


1998 Special Interest Group (SIG)[2] was formed including 3Com, Ericsson, 
IBM, Intel, Lucent, Microsoft, Motorola, Nokia, and Toshiba. 

1999 The first open Bluetooth specification 1.0 released. 

2000 The first certified Bluetooth products on market. 


2001 The latest protocol 1.1 released. 
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frequency band is 2.4-2.4835 GHz. The ISM band is open to any radio system 
such as cordless phones, garage door openers, and microwaves, and therefore is 
susceptible to strong interferences. 

A WPAN can be formed with a Bluetooth-enabled pocket PC to dial into an 
ISP and access the Internet. After downloading a file, you could walk within 10m 
of a Bluetooth-enabled printer and send the file from the pocket PC to the printer 
to have it printed. These examples show how Bluetooth can eliminate the need for 
a cable to the phone or printer. 

A Bluetooth WPAN involves up to eight devices, located within a 10-m radius 
personal operating space, that unite to exchange information or share services. 
Because it can be done spontaneously according to immediate need, it is known 
as ad hoc networking. Because a WPAN involves directly networking between 
different points, without the use of network infrastructure, it is also referred to as 
a “point-to-point network” [7,11,12]. 

The Bluetooth market focuses on four categories of users: professional 
and field workers who need to travel off-site but still require access to corporate 
communications and information; technology-savvy electronic consumers; indus- 
trial and retail workers involved in automated processes where cables can get 
in the way; and office workers whose worksites are outfitted with Bluetooth 
devices. 

Bluetooth is an ideal solution for connecting the increasing number of 
devices designed to be held in the hand or worn on the body. These devices are 
being embraced by industries using mobile automation systems. For example, 
at a car rental facility, an employee could use a Bluetooth-enabled pocket PC 
equipped with a bar code scanner to scan a vehicle identification number, enter 
mileage and fuel data, then instantly transmit a receipt to a Bluetooth-enabled 
portable printer worn on the hip. Because of the GSM subscriber identity module 
(SIM), industry experts foresee Bluetooth-enabled GSM phones to be used like 
credit cards. For example, one could use the Bluetooth-enabled mobile phone at a 
Bluetooth-enabled vending machine to charge one’s account and buy a drink. 

One of Bluetooth’s greatest advantages is that it can be used absolutely any- 
where that at least two Bluetooth devices share a 10-m range. It is possible because 
Bluetooth is designed for direct point-to-point networking between devices and 
does not require proximity to infrastructure stations like signal towers or access 
points. 

Bluetooth radio technology provides a universal bridge to existing data 
networks, a peripheral interface, and a mechanism to form small private ad hoc 
groupings of connected devices away from fixed network infrastructures. Bluetooth 
radio uses a fast acknowledgment and frequency hopping scheme to make the link 
robust. Bluetooth typically hops faster and uses shorter packets. Short packets and 
fast hopping limit the impact of interference from other radio systems that use the 
same frequency band. Use of a forward error correction (FEC) scheme limits the 
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Table 19.3 Bluetooth air interface details. 


Feature Values Notes 


Frequency range: 


* USA, Europe, and most 2.4-2.4835 GHz 79 RF channels 

other countries 

* Spain 2.445-2.475 GHz 23 RF channels 

* France 2.4465-2.4835 GHz 23 RF channels 

Bandwidth of each RF channel 1MHz 

Gross data rate 1Mbps (initial) 

2Mbps (latter) 

Time slot duration 626 us Time division multiplexing (TDM) 
is used to divide the channel into 
time slots. Transmission occurs 
in packets that occupy an odd 
number of slots (up to 5). 

One-to-one connection 721kbps 3 voice channels 

allowable maximum data rate 

Signal modulation Gaussian frequency 

shift keying (GFSK) 

Piconet access FH-TDD-TDMA 

Scatternet access FH-CDMA 

Frequency hopping rate 1600 hops/second 

Range 10 meters 


impact of random noise on long-distance links. Table 19.3 lists the parameters of 
Bluetooth air interface. 

Bluetooth is being used in mobile computers, bar code laser scanners, cash 
registers, vending machines, GPS receivers, slide projectors, printers, digital 
cameras, digital camcorders, test and measurement equipment, and LAN access 
points. IEEE now has a formalized standards development in process for Bluetooth 
known as 802.15.1. The IEEE is also exploring the enhancement of 802.15.1 with 
a high data rate Bluetooth standard: 802.15.3. 

Transmitter equipment is classified into three power classes (see Table 19.4). 
A power control is required for power class 1 equipment, whereas power controls 
for power class 2 and 3 equipment is optional. The power control is used for 
limiting the transmitted power over 0 dBm. Power control capability under 0 dBm 
is optional and could be used for optimizing the power consumption and overall 
interference level. The power steps form a monotonic sequence, with a maximum 
step size of 8 dB and a minimum step size of 2 dB. Class 1 equipment with а maxi- 
mum transmit power of 20 dBm must be able to control its transmit power down 
to 4 dBm or less. Equipment with power control capability optimizes the output 
power in a link. 
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Table 19.4 Bluetooth transmitter characteristics. 


Maximum output Nominal Minimum 
Power class power (Pmax) output power output power* Power control 
1 100 mW (20dBm) N/A 1mW (0dBm) Pmin <4dBm to 
Pmax 

Optional: Pmin** 

to Pmax 
2 2.5mW (4dBm) 1mW (0dBm) 0.25 mW Optional: Pmin** 

(—6 dBm) to Pmax 
3 1mW (0dBm) N/A N/A Optional: Pmin** 

to Pmax 


* Minimum output power at maximum power setting. 


** The lower power limit Pmin <—30 dBm is suggested but it is not mandatory, and may be chosen 
according to application needs. 


The actual sensitivity level is defined as an input level for which a raw bit 


error rate (BER) of 0.1% is met. The requirement for a Bluetooth receiver is an 
actual sensitivity level of —70 dBm or better. The receiver must achieve a — 70 dBm 
sensitivity level with any Bluetooth transmitter compliant to the transmitter speci- 
fication given in Table 19.4. 


19.4 Definitions of the Terms Used in Bluetooth 


Piconet. A collection of devices connected via Bluetooth technology in an 
ad hoc fashion. A piconet starts with two connected devices, such as a PC 
and cellular phone, and may grow to eight connected devices. All Bluetooth 
devices are peer units and have identical implementations. However, when 
establishing a piconet, one unit will act as a master for synchronization pur- 
poses, and the other(s) as slave(s) for the duration of the piconet connection. 


Scatternet. Two or more independent and nonsynchronized piconets that 
communicate with each other. A slave as well as a master unit in one piconet 
can establish this connection by becoming a slave in the other piconet. 


Master unit. The device in the piconet whose clock and hopping sequence 
are used to synchronize all other devices in the piconet. 


Slave units. All devices in a piconet that are not the master (up to seven 
active units for each master). 


MAC address. A 3-bit medium access control address used to distinguish 
between units participating in the piconet. 

Parked units. Devices in a piconet which are time-synchronized but do not 
have MAC addresses. 


Sniff and hold mode. Devices that are synchronized to a piconet, and which have 
temporarily entered power-saving mode in which device activity is reduced. 
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Figure 19.2 Bluetooth protocol stack. 


19.5 Bluetooth Protocol Stack 


The Bluetooth protocol stack allows devices to locate, connect, and exchange 
data with each other and to execute interoperable, interactive applications 
against each other. The Bluetooth protocol stack can be placed into three groups: 
transport protocol group, middleware protocol group, and application group (see 
Figure 19.2). 


19.5.1 Transport Protocol Group 

The protocols in this group are designed to allow Bluetooth devices to locate 
and connect to each other. These protocols carry audio and data traffic between 
devices and support both synchronous and asynchronous transmission for 
telephony-grade voice communication. Audio traffic is treated with high priority 
in Bluetooth. Audio traffic bypasses all protocol layers and goes directly to the 
baseband layer which then transmits it in small packets directly over Bluetooth's 
air interface. 

The protocols in this group are also responsible for managing the physical 
and logical links between the devices so that the layers above and applications 
can pass data through the connections. The protocols in this group are radio, 
baseband, link manager, logical link, and host controller interface (HCI). 


e Logical link control and adaptation protocol (L2CAD) layer. All data traf- 
fic is routed through the logical link control and adaptation protocol layer. 
This layer shields the higher layers from the details of the lower layers. The 
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higher layers need not be aware of the frequency hops occurring at the radio 
and baseband level. It is also responsible for segmenting larger packets from 
higher layers into smaller packets, which are easier to handle by the lower 
layer. The L2CAP layer in two peer devices facilitates the maintenance of 
the desired grade of service. The L2CAP layer is responsible for admission 
control based on the requested level of service and for coordinating with the 
lower layers to maintain this level of service. 


Link manager layer (LML). The link manager layers in communicating 
devices are responsible for negotiating the properties of the Bluetooth air 
interface between them. These properties may be anything from bandwidth 
allocation to support services of a particular type to periodic bandwidth 
reservation for audio traffic. This layer is responsible for supervising device 
pairing. Device pairing is the creation of a trust relationship between the 
devices by generating and storing an authentication key for future device 
authentication. This is an important step in establishing a communication 
between two devices. If this fails, the communication link may get severed. 
The link managers are also responsible for power control and may request 
adjustments in power levels. 


Baseband and radio layers. The baseband layer is responsible for the process 
of searching for other devices and establishing a connection with them. It 
is also responsible for assigning the master and slave roles. This layer also 
controls the Bluetooth unit's synchronization and transmission frequency 
hopping sequence. This layer also manages the links between the devices 
and is responsible for determining the packet types supported for synchro- 
nous and asynchronous traffic. 


Host controller interface (HCI) layer. The HCI allows higher layers of 
the stack, including applications, to access the baseband, link manager, 
etc., through a single standard interface. Through HCI commands, the 
module may enter certain modes of operation. Higher layers are informed 
of certain events through the HCI. The HCI is not a required part of the 
specification. It has been developed to serve the purpose of interoperability 
between host devices and Bluetooth modules. Bluetooth product implemen- 
tation need not be HCI compliant to support a fully compliant Bluetooth 
air interface. 


19.5.2 Middleware Protocol Group 

This group comprises the protocols needed for existing applications to operate 
over Bluetooth links. The protocols in this group can be third party and industry 
standard protocols and protocols developed specifically by the Special Interest 
Group (SIG)[2] for Bluetooth wireless communication. The protocols in this 
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group can include TCP, IP, PPP, etc. A serial port emulator protocol, КЕСОММ, 
enables applications that normally would interface with a serial port to operate 
with Bluetooth links. A packet-based telephony control protocol for advanced 
telephony operations is also present. This group has a service discovery protocol 
(SDP), which lets devices discover each other’s services. 


RFCOMM layer. Serial ports are the most common communication inter- 
face in use today. These serial ports invariably involve the use of cable. 
Bluetooth’s prime aim is to eliminate cables and provide support for serial 
communication without cables. RFCOMM provides a virtual serial port 
to applications. The advantage provided by this layer is that it is easy for 
applications designed for cabled serial ports to migrate to Bluetooth. The 
applications can use RFCOMM much like a serial port to accomplish sce- 
narios like dial-up networking, etc. RFCOMM is an important part of the 
protocol stack because of the function it performs. 


Service discovery protocol (SDP) layer. In Bluetooth wireless communica- 
tions any two devices can start communicating on the spur of the moment. 
Once a connection is established there is a need for the devices to find and 
understand the services the other devices have to offer. This is taken care of 
in this layer. The SDP is a standard method for Bluetooth devices to discover 
and learn about the services offered by the other device. Service discovery is 
important in providing value to the end-user. 


Infrared data association (IrDA) interoperability protocols. The SIG has 
adopted some IrDA protocols to ensure interoperability between applica- 
tions. IrDA and Bluetooth share some important attributes. The Infrared 
Object Exchange Protocol is designed to enable units supporting infrared 
communication to exchange a wide variety of data and comments. 


Object exchange (OBEX) protocol. IrOBEX (in short, OBEX) is a session pro- 
tocol developed by the Infrared Data Association to exchange objects in a 
simple and spontaneous manner. OBEX provides the same basic functionality 
as HTTP but in a much lighter fashion. It uses a client-server model and is 
independent of the transport mechanism and transport application program- 
ming interface (API), provided it realizes a reliable transport base. In addition, 
the OBEX protocol defines a folder-listing object, which is used to browse the 
contents of folders on a remote device. 


Networking layers. Bluetooth wireless communication uses a peer-to-peer 
network topology rather than an LAN type topology. Dial-up networking 
uses the attention (AT) command layer. In most cases the network that is 
being accessed is an IP network. Once a dial-up connection is established 
to an IP network, then standard protocols like TCP, UDP, and HTTP 
can be used. A device can also connect to an IP network using a network 
access point. The Internet PPP is used to connect to the access point. 
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The specification does not define a profile that uses the TCP/IP directly over 
Bluetooth links. 


Telephone control specification (TCS) layer and audio. This layer is 
designed to support telephony functions, which include call control and 
group management. These are associated with setting up voice calls. Once 
a call is established a Bluetooth audio channel can carry the call’s voice 
content. TCS can also be used to set up data calls. The TCS protocols are 
compatible with ITU specifications. The SIG is also considered a second 
protocol called TCS-AT, which is a modem control protocol. AT commands 
over RFCOMM are used for some applications. Audio traffic is treated 
separately in Bluetooth. Audio traffic is isochronous, meaning that it has 
a time element associated with it. Audio traffic is routed directly to the 
baseband. Special packets called synchronous connection-oriented are used 
for audio traffic. Bluetooth audio communication takes place at a rate of 
64 kbps using one of the two data encoding schemes — 8-bit logarithmic 
pulse code modulation or continuous variable slope delta modulation. 


19.5.3 Application Group 

This group consists of actual applications that make use of Bluetooth links and 
refers to the software that exists above the protocol stack. The software uses the 
protocol stack to provide some function to the user of the Bluetooth devices. The 
most interesting applications are those that substantiate the Bluetooth profiles. 
The Bluetooth-SIG does not define any application protocols nor does it specify 
any API. Bluetooth profiles are developed to establish a base point for use of a 
protocol stack to accomplish a given usage case. 


19.6 Bluetooth Link Types 


The Bluetooth baseband technology supports two link types: a synchronous 
connection oriented (SCO) type (used primarily for voice) and an asynchronous 
connectionless (ACL) type (used primarily for packet data). 

Different master-slave pairs of the same piconet can use different link types 
and the link type may change arbitrarily during a session. Each link type supports 
up to sixteen different packet types. Four of these are control packets and are 
common for both SCO and ACL links. Both link types use a time division duplex 
(TDD) scheme for full-duplex transmission. 

The SCO link is symmetric and typically supports time-bounded voice traffic. 
SCO packets are transmitted over reserved intervals. Once the connection is estab- 
lished, both master and slave units may send SCO packets without being polled. 
The SCO link type supports circuit-switched, point-to-point connections and is 
used often for voice traffic. The data rate for SCO links is 64 kbps. 
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Figure 19.3 Bluetooth packets. 


The ACL link is packet oriented and supports both symmetric and asym- 
metric traffic. The master unit controls the link bandwidth and decides how much 
piconet bandwidth is given to each slave, and the symmetry of the traffic. Slaves 
must be polled before they can transmit data. The ACL link also supports broad- 
cast messages from the master to all slaves in the piconet. Multislot packets can be 
used in ACL and they can reach maximum data rates of 721 kbps in one direction 
and 57.6 kbps in the other direction if no error correction is used. 

Data packets are protected by an automatic retransmission query (ARQ) 
scheme. Thus, when a packet arrives, a check is performed on it. If there is an 
error detected, the receiving unit indicates this in the return packet. In this way, 
retransmission is done only for the faulty packets. Retransmission is not feasible 
for voice so better error protection is used. Figure 19.3 shows the Bluetooth pack- 
ets and Table 19.5 provides the details. 

A symmetric 1-slot DH1 link between the master and slave carries 216 bits 
per slot at a rate of 800 slots per second in each direction. The associated rate is 
216 х 800 = 172.8 kbps. 

The asymmetric DMS link uses a 5-slot packet carrying 1792 bits per packet 
by the master and a 1-slot packet carrying 136 bits per packet by the slave ter- 
minal. The number of packets per second in each direction is 1600/6. The data 
rate of the master is 1792 х 1600/6 = 477.8 kbps and the data rate of the slave 
terminal is 136 х 1600/6 = 36.3 kbps. 


19.6 Bluetooth Link Types 


Table 19.5 Bluetooth packet types. 


Type Link Name 

0000 Common Null 1 
0001 Common Poll 1 
0010 Common FHS 1 
0011 Common DM1 1 
0100 ACL DH1 1 
0101 SCO HV1 1 
0110 SCO HV2 1 
0111 SCO HV3 1 
1000 SCO DV 1 
1001 ACL AUX1 1 
1010 ACL DM3 3 
1110 ACL DH3 3 
1110 ACL DM5 5 
1111 ACL DH5 5 


No. of slots 
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Description 


No payload; used to return link 
information to source about the success 
of previous transmission, or status of 
Rx buffer (flow); no ACK 


No payload, used by master to poll 
slave; ACK 


Special control packet for revealing device 
address and the clock of sender; used in 
page master response, inquiry response, 
and frequency hop synchronization; 2/3 
FEC encoded 

Support control messages and can 

also carry user data, 16-bit CRC, 2/3 FEC 
encoded 

Carries 28 information bytes (header + 
payload) + 16 bit-CRC; not FEC encoded; 
used for high-speed data services 
Carries 240 bits for user voice samples, 
used for 64kbps voice, no FEC encoding 


Carries 160 bits for user voice samples 
and 80 bits of parity for 1/3 FEC encoding 


Carries 80 bits for user voice samples 
and 160 bits of parity for 2/3 FEC 
encoding 


Combined data (150 bits) and voice (50 
bits) packet data field, 2/3 FEC encoded 


Carries 30 information bytes, no CRC or 
FEC, used for high-speed data services 
Carries 123 information bytes + 16-bit 
CRC, 2/3 FEC encoded 


Carries 185 information bytes + 16-bit 
CRC, not FEC encoded 


Carries 226 information bytes + 16-bit 
CRC, 2/3 FEC encoded 


Carries 341 information bytes + 16-bit 
CRC, not FEC encoded 


The asymmetric DHS link uses a 5-slot packet carrying 2712 bits per packet by 
the master and a 1-slot packet carrying 216 bits per packet by the slave terminal. The 
number of packets in each direction is 1600/6 packets per second. The data rate of 
the master is 2712 X 1600/6 = 723.2kbps and the data rate of the slave terminal is 
216 X 1600/6 = 57.6kbps. Table 19.6 lists the ACL packet types and their data rates. 
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Table 19.6 ACL packet types and data rates. 


Asymmetric (kbps) 


Link Symmetric (kbps) Master Slave 
DM1 108.8 108.8 108.8 
DH1 172.8 172.8 172.8 
DM3 256 384 54.4 
DH3 384 576 86.4 
DM5 286.7 477.8 36.3 
DH5 432.6 723.2 57.6 


Example 19.1 

What is the hopping rate of Bluetooth, and how many bits are transmitted in one 
slot? If each frame of the HV3 voice packet in Bluetooth carries 80 bits of sample 
speech, what is the efficiency of the packet transmission? How often do HV3 
packets have to be sent to support 64 kbps voice in each direction? 


Solution 
* Hopping rate — 1600 hops per second, 240 bits in one slot packet 


e. EE eee 
1 = 220 0.3333 


• Let x be the number of times a packet is sent 


x X 80 = 64,000 
“x = 800 


Example 19.2 

A symmetric 1-slot DM1 link between a master and a slave carries 136 bits per 
slot at a rate of 800 slots per second (every other slot) in each direction. Find the 
associated data rate. 


Solution 


* Associated data rate — 136-500 = 108.8kbps 


19.7 Bluetooth Security 
Bluetooth security supports authentication and encryption. These features are 
based on a secret link key that is shared by pair of devices. A pairing procedure is 
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Figure 19.4 Bluetooth security architecture. 


used when two devices communicate for the first time to generate this key. There 
are three security modes to a device: 


* Non-secure. A device will not initiate any security procedure. 


* Service level enforced security. A device does not initiate security procedures 
before channel establishment at the L2CAP level. This mode allows different 
and flexible access policies for applications, especially running applications 
with different security requirements in parallel. 


* Link level enforced security. A device initiates security procedures before 
the link set-up at the LMP is completed. 


Figure 19.4 shows Bluetooth security architecture. 


19.7.1 Security Levels 
There are two kinds of security levels: authentication and authorization. 


* Authentication verifies who is at the other end of the link. In Bluetooth 
this is achieved by the authentication procedure based on the stored link 
key or by the pairing procedure. To meet different requirements on avail- 
ability of services without user intervention, authentication is performed 
after determining what the security level of the requested service is. Thus, 
authentication cannot be performed when the ACL link is established. 
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Figure 19.5 Authentication procedures. 


The authentication is performed when a connection request to a service is 
submitted. The following procedure is used (see Figure 19.5): 


1. 


Vega cs 


The connect request to L2CAP is sent. 

L2CAP requests access from the security manager. 
The security manager enquires the service database. 
The security manager enquires the device database. 


If necessary, the security manager enforces the authentication and encryp- 
tion procedure. 


The security manager grants access, and L2CAP continues to set up the 
connection. 


Authentication can be performed in both directions: client authenticates 
server and vice versa. 


* Authorization. When one device is allowed to access the other, the concept 
of trust comes into existence. Trusted devices are allowed access to services. 
While, on the contrary, untrusted devices may require authorization based 
on user interaction before access to services is granted. There are two kinds 
of device trust levels: 


1. 


Trusted device: A device with a fixed relationship (paired) that has trusted 
and unrestricted access to all services. 


. Untrusted device: This device has been previously authenticated, a 


link key is stored, but the device is not marked as trusted in the device 
database. 


. An unknown device is also an untrusted device. No security information 


is available for this device. 
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For services, the requirement for authorization, authentication, and encryption 
are set independently (although some restrictions apply). The access requirements 
define three security levels: 


* Services that require authorization and authentication — automatic access is 
only granted to trusted devices. Other devices need a manual authorization. 


e Services that require authentication only — authorization is not necessary. 


e Services open to all devices— authentication is not required, no access 
approval is required before service access is granted. 


A default security level is defined to serve the needs of legacy applications. 
This default policy will be used unless other settings are found in a security data- 
base related to a service. 


19.7.2 Limitations of Bluetooth Security 

Only a device is authenticated, and not its user. There is no mechanism to preset 
authorization per service. However, a more flexible security policy can be imple- 
mented with the present architecture without a need to change the Bluetooth 
protocol stack. Also, it is not possible to enforce unidirectional traffic. 


19.8 Network Connection Establishment in Bluetooth 
Before any connection in a piconet is created, all devices are in STANDBY mode. In 
this mode, an unconnected unit periodically listens for messages every 1.28 seconds. 
Each time a device wakes up, it listens on a set of 32 hop frequencies defined for 
that unit. The number of hop frequencies varies in different geographic regions. 

The connection procedure is initiated by any one of the devices, which then 
becomes master. À connection is made by a PAGE message if the address is already 
known, or by an INQUIRY message followed by a subsequent PAGE message if 
the address is unknown (see Figure 19.6). 

In the initial PAGE state, the master unit sends a train of 16 identical page 
messages on 16 different hop frequencies defined for the device to be paged (slave 
unit). If no response is received, the master transmits a train on the remaining 16 
hop frequencies in the wake-up sequence. The maximum delay before the master 
reaches the slave is twice the wake-up period (2.56 seconds) while the average 
delay is half the wake-up period (0.64 seconds). 

The INQUIRY message is typically used for finding Bluetooth devices, 
including public printers, fax machines, and similar devices with an unknown 
address. The INQUIRY message is similar to the PAGE message, but may require 
one additional train period to collect all responses. 

A power saving mode can be used for connected units in a piconet if no data 
needs to be transmitted. The master unit can put slave units into HOLD mode, 
where only the internal timer is running. Slave units can also demand to be put 
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Figure 19.6 Device states in Bluetooth. 


into HOLD mode. Data transfer restarts instantly when units transition out of 
HOLD mode. The HOLD is used when connecting several piconets or managing 
a low-power device such as a temperature sensor. 

Two more low-power modes are also available: the SNIFF mode and PARK 
mode. In the SNIFF mode, a slave device listens to the piconet at a reduced rate, 
thus reducing its duty cycle. The SNIFF interval is programmable and depends on 
the application. In the PARK mode, a device is still synchronized to the piconet 
but does not participate in the traffic. Parked devices have given up their MAC 
address and occasionally listen to the traffic of the master to resynchronize and 
check on broadcast messages. 

If we list the modes in increasing order of power efficiency, then the SNIFF 
mode has the higher duty cycle, followed by the HOLD mode with a lower duty 
cycle, and the PARK mode with the lowest duty cycle. 


19.9 Error Correction in Bluetooth 
Three error correction schemes are defined for the Bluetooth baseband controller: 


• 1/5 rate forward error correction (FEC) code 
• 2/; rate forward error correction code 


* Automatic repeat request (ARQ) scheme for data 
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Figure 19.7 Packet format in Bluetooth. 


The purpose of the FEC scheme on the data payload is to reduce the number 
of retransmissions. However, in a reasonably error-free environment, FEC creates 
unnecessary overhead that reduces the throughput. Therefore, the packet definitions 
have been kept flexible as to whether or not to use FEC in the payload. The packet 
header is always protected by a 1/3 rate FEC. It contains link information and should 
survive bit errors. An unnumbered ARQ scheme is applied in which data transmit- 
ted in one slot is directly acknowledged by the recipient in the next slot. For a data 
transmission to be acknowledged, both the header error check and the cyclic redun- 
dancy check must be satisfied, otherwise a negative acknowledgment is returned. 


19.10 Network Topology in Bluetooth 

Bluetooth devices can create both point-to-point and point-to-multipoint con- 
nections. A connection with two or several (maximum 8 devices) devices is a 
piconet where all devices follow the same frequency-hop scheme. To avoid inter- 
ference between devices, one of the devices automatically becomes a master of the 
piconet. In each slot, a packet can be exchanged between the master (M) and one 
of the slaves (S). Packets have a fixed format (see Figure 19.7). 

A Bluetooth packet format is based on one packet per hop and a basic 1-slot 
packet of 625 us that can be extended to 3-slot (1875 us) and 5-slot (3125 ps). 
A frame format allows the master to poll multiple slaves. 

Each packet begins with a 72-bit access code that is derived from the master 
identity and is unique for the channel. Every packet exchanged on the channel is 
preceded by this access code. Recipients on the piconet compare incoming signals 
with the access code. If the two do not match, the received packet is not consid- 
ered valid on the channel and the rest of its contents are ignored. Besides packet 
identification, the access code is also used for synchronization and compensating 
for offset. The access code is robust and resistant to interference. 

Two or several piconets can communicate with each other and are then 
called a scatternet. 


19.11 Bluetooth Usage Models 


In this section we discuss some of the Bluetooth usage models. Each usage model 
has one or more profiles. 
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Three-in-one phone. The three-in-one phone usage model describes how 
a telephone handset may connect to three different service providers. 
The telephone may act as a cordless telephone connecting to the PSTN 
at home, charged at a fixed line charge. The telephone can also connect 
directly to other telephones acting as a walkie-talkie or handset extension. 
Finally, the telephone may act as a cellular phone connecting to the cellular 
infrastructure. 


File transfer. The file transfer usage model offers the capability to transfer 
data objects from one Bluetooth device to another. Files, entire folders, 
directories, and streaming media formats are supported in this model. The 
model also offers the possibility of browsing the contents of the folders on 
a remote device. 


Synchronization. The synchronization usage model provides the means 
for automatic synchronization between, for instance, a desktop PC, a por- 
table PC, a PDA, and a notebook. The synchronization requires business 
card, calendar, and task information to be transferred and processed by 
computers, cellular phones, and PDAs utilizing a common protocol and 
format. 


Internet bridge. The Internet bridge usage model describes how a mobile 
phone or cordless modem provides a PC with dial-up networking capabilities 
without the need for physical connection to the PC. This networking sce- 
nario requires a two-piece protocol stack, one for AT-commands to control 
the mobile phone and another stack to transfer payload data. 


Ultimate handset. The ultimate handset usage model defines how a Bluetooth- 
equipped wireless handset can be connected to act as a remote unit’s audio 
input and output interface. This unit is probably a mobile phone or a PC for 
audio input and output. 


19.12 Bluetooth Applications 
The following are some of the areas where Bluetooth can be used: 


Replacing serial cables with radio links 
Wearable networks/WPANs 
Desktop/room wireless networking 
Hot-spot wireless networking 


Medical: Transfer of measured values from training units to analytical 
systems, patient monitoring 


Automotive: Remote control of audio/video equipment, hands-free telephony 
Point-of-sale payments: Payments by mobile phone 
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19.13 WAP and Bluetooth 


Bluetooth can be used with WAP like any other wireless network. Bluetooth 
wireless networks can be used to transport data from a WAP client to a WAP 
server. The WAP client can make use of Bluetooth’s SOP to find the WAP server/ 
gateway. This is very useful when the WAP device is a mobile phone and when it 
comes into the range of a WAP server, it can use Bluetooth’s SDP to discover the 
gateway. The Bluetooth SDP must be able to provide some details about the WAP 
server to the WAP client. 

The other feature that can be supported is the reverse of the above. The 
WAP server can periodically check for the availability of WAP-enabled clients in 
its range. It can use Bluetooth’s SDP to do this. If there are any clients, the server 
can push any data to the client. The client of course is not required to accept the 
data pushed to it. 


19.14 Summary 

In this chapter we discussed Bluetooth technology that allows for replacing many 
proprietary cables that connect one device to another with one universal short- 
range radio link. Bluetooth radio technology provides a universal bridge to exist- 
ing data networks, a peripheral interface, and a mechanism to form small, private 
ad hoc groupings of connected devices away from fixed network infrastructures. 
The Bluetooth technology has a number of advantages including minimal hard- 
ware dimensions, low cost of components, and low power consumption. These 
advantages make it possible to introduce Bluetooth in many types of devices at 
a low cost. The 720 kbps data capability provided by Bluetooth can be used for 
cable replacement and several other applications, such as LAN. 


Problems 
19.1 What are piconet and scatternet in Bluetooth? 


19.2 Discuss transport protocol group in Bluetooth. 
19.3 Define link types in Bluetooth. 
19.4 How is security achieved in Bluetooth? 


19.5 The hopping rate of 1600 hops per second is used in Bluetooth that 
carries 240 bits in a 1-slot packet. If each frame of the HV2 voice packet 
carries 160 bits of sample speech, what is the efficiency of packet trans- 
mission? How often are HV2 packets sent to support 64kbps voice in 
each direction? 


19.6 Asymmetric 1-slot DH1 link of Bluetooth between a master and a slave 
carries 216 bits per slot. What is the associated rate? 
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19.7 The asymmetric DMS link of Bluetooth uses a 5-slot packet to carry 


1792 bits per packet by the master terminal and а 1-slot packet to carry 
136 bits per packet by the slave terminal. What are the data rates of the 
master and slave terminal? 
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CHAPTER 20 


Wireless Personal Area Networks: 
Low Rate and High Rate 


20.1 Introduction 


Wired sensor networks have been around for decades, with an array of gauges 
measuring temperature, fluid levels, humidity, and other attributes on pipelines, 
pumps, generators, and manufacturing lines. Many of these run as separately 
wired networks, sometimes linked to a computer but often to a control panel that 
flashes lights or sounds an alarm when a temperature rises too high or a machine 
vibrates too much. Also wired in are actuators, which let the control panel slow 
down a pump or start a fan in response to the sensor data. 

Now advances in silicon radio chips, coupled with cleverly designed routing 
algorithms and network software are promising to eliminate those wires and their 
installation and maintenance costs. Mesh network topologies will let these wireless 
networks route around nodes that fail or whose radio signal is degraded by inter- 
ference from heavy equipment. A gateway will create a two-way link with legacy 
control systems, hosts, wired local area networks (WLANs), or the Internet [12,13]. 

Wireless sensor networks can use several different wireless technologies, 
including IEEE 802.11 WLANs, Bluetooth, and radio frequency identification 
(RFID). But at present most of the applications are of low-power radios having 
a range of about 30 to 200 feet and data rates of up to around 300kbps. IEEE 
802.15.4 [4] is the approved low-rate standard for a simple, short-range wireless 
network whose radio components could run several years on a single battery. 
Figure 20.1 gives a summary of wireless personal access network (WPAN) stan- 
dards. We discussed IEEE 802.15.1 (WPAN-Bluetooth) in Chapter 19. In this 
chapter we focus on IEEE 802.15.3 (WPAN-LR) and IEEE 802.15.3a (WPAN- 
HR) standards [5]. 


20.2 Wireless Sensor Network 

A wireless sensor network contains a large number of tiny sensor nodes that are 
densely deployed either inside the phenomenon to be sensed or very close to it. 
Sensor nodes consist of sensing, data processing, and communicating components. 
The position of sensor nodes need not be engineered or predetermined. This allows 
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Figure 20.1 A summary of IEEE 802.15 WPAN standards. 


random deployment in inaccessible terrain or disaster relief operations. This also 
means that sensor network protocols and algorithms must possess self-organizing 
capabilities. Another unique feature of sensor networks is the cooperative effort of 
sensor nodes. Sensor nodes are fitted with an inboard processor. Instead of send- 
ing the raw data to the nodes responsible for the fusion, they use their processing 
abilities to locally carry out simple computations and transmit only required and 
partially processed data. In the following sections we introduce wireless sensor 
networks briefly. Interested readers should refer to references [1 and 2] for more 
details. 

Wireless sensor network applications require wireless ad hoc networking 
techniques. Although many protocols and algorithms have been proposed for 
traditional wireless ad hoc networks, they are not well suited for the unique fea- 
tures and application requirements of wireless sensor networks. The differences 
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between wireless sensor networks and traditional wireless ad hoc networks are 


listed here [22]: 


* The number of sensor nodes in a wireless sensor network can be several 
orders of magnitude higher than the nodes in a wireless ad hoc network. 


* [n a wireless sensor network, sensor nodes are densely deployed. 
* Sensor nodes are prone to failure. 
* The topology of a wireless sensor network changes very frequently. 


* Sensor nodes mainly use broadcast communication paradigms whereas most 
traditional ad hoc networks are based on point-to-point communications. 


* Sensor nodes are limited in power, computational capabilities, and 
memory. 


* Sensor nodes may not have global identification because of the large amount 
of overhead and large number of sensors. 


* Another factor that distinguishes wireless sensor networks from tra- 
ditional mobile ad hoc networks (MANETS) is that the end goal is the 
detection/estimation of some event(s) of interest, and not just communi- 
cation. To improve detection performance, it is often quite useful to fuse 
data from multiple sensors [23]. Data fusion requires the transmission of 
data and control messages. This need may impose constraints on network 
architecture. 


* The large number of sensing nodes may congest the network with infor- 
mation. To solve this problem, some sensors, such as cluster heads, 
can aggregate the data, perform some computation (e.g., average, sum- 
mation, highest value, etc.), and then broadcast the summarized new 
information. 


Since large numbers of sensor nodes are densely deployed, neighbor nodes 
may be very close to each other. Hence, multihop communication in wireless sen- 
sor networks is expected to consume less power than traditional single hop com- 
munication. Furthermore, the transmission power level can be kept low, which 
is highly desirable in covert operations. Multihop communication can effectively 
overcome some of the signal propagation effects experienced in long-distance 
wireless communication. 

One of the most important constraints on sensor nodes is the low power 
consumption requirement. Sensor nodes carry limited, generally irreplaceable 
power sources. Therefore, while traditional networks aim to achieve high quality 
of service (QoS) provisions, wireless sensor network protocols must focus primar- 
ily on power conservation. They must have built-in trade-off mechanisms that 
give the end-user the option of prolonging network lifetime at the cost of lower 
throughput or higher transmission delay. 
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20.3 Usage of Wireless Sensor Networks 


Wireless sensor networks have been useful in a variety of areas. The primary areas 
in which these networks are deployed follows. 


* Environmental observations. Wireless sensor networks can be used to mon- 
itor environmental changes. An example is water pollution detection in a 
lake that is located near a factory that uses chemical substances. Sensor 
nodes are randomly deployed in unknown and hostile areas and relay the 
exact origin of a pollutant to a centralized authority which takes appropri- 
ate measures to limit the spreading of pollution. Other examples include 
forest fire detection, air pollution, and rainfall observation in agriculture. 


* Military monitoring. The military uses sensor networks for battlefield sur- 
veillance. Sensors can monitor vehicular traffic, track the position of the 
enemy, or even safeguard the equipment of side deploying sensors. 


* Building monitoring. Wireless sensor networks can also be used in large 
buildings or factories to monitor climate changes. Thermostats and tem- 
perature sensor nodes are deployed all over the building's area. In addition, 
sensors can be used to monitor vibration that can damage the structure of 
a building. 

* Health care. Sensors can be used in biomedical applications to improve 
the quality of provided care. Sensors are implanted in the human body to 


monitor medical problems such as cancer and help patients maintain their 
health. 


20.4 Wireless Sensor Network Model 


A wireless sensor network consists of hundreds or thousands of low-cost nodes, 
which could either have a fixed location or be randomly deployed to monitor the 
environment. Due to their small size, they have a number of limitations. Sensors 
usually communicate with each other using a multi hop approach. The flow of 
data ends at special nodes called base stations (sometimes they are referred to as 
sinks) (see Figure 20.2). A base station links the sensor network to another net- 
work (like a gateway) to disseminate the data sensed for further processing. Base 
stations have enhanced capabilities over simple sensor nodes since they must do 
complex data processing; this justifies the fact that base stations have worksta- 
tion/laptop class processors, and of course enough memory, energy, storage, and 
computational power to perform their tasks well. Usually, the communication 
between base stations is initiated over high bandwidth links. 

One of the biggest problems of sensor networks is power consumption, 
which is greatly affected by communication between nodes. To solve this, aggre- 
gation points are introduced in the network. This reduces the total number of 
messages exchanged between nodes and saves some energy. Usually, aggregation 
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Figure 20.2 Wireless sensor network. 


points are regular nodes that receive data from neighboring nodes, perform some 
kind of processing, and then forward the filtered data to the next hop. Similar to 
aggregation points is clustering. Sensor nodes are organized into clusters, each 
cluster having a “cluster head” as the leader. The communication within a cluster 
must travel through the cluster head, which is then forwarded to a neighboring 
cluster head until it reaches its destination, the base station. Another method to 
save energy is to set the nodes to go idle (into sleep mode) if they are not needed, 
and wake up when required. The challenge is to find a pattern at which energy 
consumption is made evenly for all the nodes in the network. 

The design of the sensor network as described by Figure 20.2 is influenced 
by many factors, including fault tolerance, scalability, production costs, operat- 
ing environment, sensor network topology, hardware constraints, transmission 
media, and power consumption. 


* Fault tolerance. Some sensor nodes may fail or be blocked because of lack 
of power, physical damage, or environmental interference. The failure of 
sensor nodes should not affect the overall task of the sensor network. This 
is the reliability or fault tolerance issue. Fault tolerance is the ability to sus- 
tain sensor network functionality without any interruption due to sensor 
node failures. The reliability R,(t) of a sensor node is usually modeled using 
Poisson’s distribution: 


R(t) = ew (20.1) 
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№, = the failure rate of sensor node Ё 
t = е time period 


* Scalability. The number of sensor nodes deployed to study a phenomenon 
may be on the order of hundreds or thousands. Depending on the applica- 
tion, the number may reach an extreme value of millions. New schemes 
must be able to work with this number of nodes and must also utilize the 
high density of the sensor networks. The density can range from a few sen- 
sor nodes to a few hundred sensor nodes in the region, which can be less 
than 10 m in diameter. The density u can be calculated as 


ШК) = Na? (20.2) 
A 


where: 
N = the number of scattered sensor nodes in region A 
R = the radio transmission range 
(К) = the number of nodes within the transmission radius of each node in 
region A 


* Production cost. Since sensor networks consist of a large number of sensor 
nodes, the cost of a single node is very important to justify the overall cost 
of the network. The cost of each sensor node has to be kept low. The cost of 
a sensor node should be much less than US$1 in order for it to be feasible. 


* Hardware constraints. A sensor node is made up of four basic components 
(see Figure 20.3): a sensing unit, a processing unit, a transceiver unit, and 
a power unit. There may also be additional application-dependent compo- 
nents such as a location finding system, power generator, and mobilizer. 
Sensing units are usually composed of two subunits: sensors and analog- 
to-digital converters (ADCs). The analog signals produced by the sensors 
based on the observed phenomenon are converted into digital signals by 
ADC, and then fed into the processing unit. The processing unit, which 
is generally associated with a small storage unit, manages the procedures 
that make the sensor node collaborate with other nodes to carry out the 
assigned sensing tasks. A transceiver unit connects the node to the network. 
One of the most important components of a sensing node is the power unit. 
Power units may be supported by power scavenging units such as solar 
cells. There are also other subunits that are application-dependent. Most of 
the sensor network routing techniques and sensing tasks require knowledge 
of location with high accuracy. Thus, it is common that a sensor node has 
a location finding system. A mobilizer may sometimes be needed to move 
sensor nodes when it is required to carry out the assigned tasks. All of these 
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Figure 20.3 The components of a sensor node. 


subunits may need to fit into a matchbox-sized module. The required size 
may be even smaller than a cubic centimeter. Apart from size, there are 
some other stringent constraints for sensor nodes. These nodes must con- 
sume extremely low power, operate in high volumetric densities, have low 
production cost, be dispensable and autonomous, operate unattended, and 
be adaptive to the environment. 


* Sensor network topology. Hundreds to several thousands of nodes are 
deployed throughout the sensor field. Node densities may be as high as 
20 nodes/m3. Deploying a high number of nodes densely requires careful 
handling of topological maintenance. 


* Operating environment. Sensor nodes are densely deployed either very close to 
or directly inside the phenomenon to be observed. They usually work unattended 
in remote geographic areas. They may work in the interior of large machinery, 
at the bottom of an ocean, in a biologically or chemically contaminated field, in 
a battlefield beyond the enemy lines, or in a home or large building. 


* Transmission media. In a multihop sensor network, communication nodes 
are linked by a wireless medium. These links are formed by radio, infrared, 
or optical media. Both infrared and optical media require a line-of-sight 
between sender and receiver. To enable the global operation of sensor net- 
works, the chosen transmission medium must be available worldwide. 


* Power consumption. The wireless sensor node can only be equipped with 
a limited power source (<0.5 Ah, 1.2 V). Sensor node lifetime shows a 
strong dependency on battery lifetime. In a multihop sensor network, 
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each node plays the dual role of data originator and data router. The 
disfunctioning of a few nodes can cause significant topological changes 
and might require rerouting of packets and reorganization of the network. 
Hence, power conservation and power management take on additional 
importance. Power consumption can be divided into three domains: sens- 
ing, communication, and data processing. Sensing power varies with the 
nature of applications. Sporadic sensing might consume less power than 
constant event monitoring. The complexity of event detection also plays a 
crucial role in determining energy expenditure. Higher ambient noise lev- 
els might cause significant corruption and increase detection complexity. 
The energy in data communication involves both data transmission and 
reception. In the following formulation for radio power consumption (P ) 
is given [18]: 


PON.PAT T P. (Loa) H Np [Pr (Ron + RJ] (20.3) 


— power consumed by transmitter 

— power consumed by receiver 

— the output power of transmitter 

= transmitter on time; this can be further broken down as Т and 

T „r (L is the packet size and R is the data rate) 

receiver on time 

— transmitter start-up time 

receiver start-up time 

— transmitter and receiver switched on per unit time, which depends 
on the task and media access control (MAC) scheme 


Z ж 4.79 
rl 
|| 


Today’s state-of-the-art low-power radio transceiver has typical P, and P, 


values around 20 dBm and Р, close to 0dBm. The pico-radio aims at a Р value 
of —20 dBm. 


Energy expenditure in data processing is much less compared to data com- 


munication. Local data processing is crucial in minimizing power consumption 
in a multihop sensor network. A sensor node must have built-in computational 
abilities and be capable of interacting with its surroundings. Further limitations 
of cost and size lead us to the choice of complementary metal oxide semiconduc- 
tor (CMOS) technology for a microprocessor. The power consumption in data 
processing (Р) сап be given as [19]: 


P, = CV? f + power loss due to leakage current (20.4) 
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where: 
C = total switching capacitance 
V= voltage swing 
f = switching frequency 


20.5 Sensor Network Protocol Stack 


The protocol stack combines power and routing awareness, integrates data with 
networking protocols, communicates power efficiently through the wireless 
medium, and promotes cooperative efforts of sensor nodes. The protocol stack 
consists of the physical layer, data link layer, network layer, transport layer, appli- 
cation layer, power management plane, mobility management plane, and task 
management plane (see Figure 20.4). 


20.5.1 Physical Layer 
The physical layer addresses the needs of simple but robust modulation, 
transmission, and receiving techniques. It is responsible for frequency selection, 


Application layer 


Transport layer 


Network layer 


Data link layer 


eue|d juswebeuew ysel 


= 
o 
S. 
E: 
x 
3 
D 
=} 
D 
© 
Ф 
3 
Ф 
ES 
= 
o 
D 
=] 
Ф 


eue|d зоәшәбеиеш Јәмоа 


Physical layer 


Figure 20.4 The sensor network protocol stack. 
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carrier frequency generation, signal detection, modulation, and data encryption. 
The 915 MHz ISM band has been widely suggested for sensor networks. 

Modulation depends on the transceiver and hardware design constraints, 
which aim for simplicity, low power consumption, and low cost per unit. Binary 
modulation schemes are simpler to implement and thus are deemed to be more 
energy efficient. Low transmission power and simple circuity make ultra wideband 
(UWB) an attractive candidate because of baseband transmission (i.e., intermedi- 
ate or carrier frequency), use of pulse position modulation, resilience to multipath 
and low transmission power, and simple transceiver circuitry. Energy consumption 
minimization is of paramount importance when designing the physical layer for 
a sensor network in addition to the usual effects such as scattering, shadowing, 
reflection, diffraction, multipath, and fading. 


20.5.2 Data Link Layer 

The data link layer is responsible for multiplexing data streams, data frame detec- 
tion, medium access, and error control. It ensures reliable point-to-point and 
point-to-multipoint connections in a communication network. The MAC protocol 
in a wireless multihop self-organizing sensor network should achieve two goals. 
The first is the creation of the network infrastructure. Since thousands of sensor 
nodes are densely scattered in a sensor field, MAC must establish communication 
links for data transfer. This forms the basic infrastructure needed for wireless 
communication hop to hop and gives the sensor network self-organizing ability. 
The second objective is to fairly and efficiently share communication resources 
between sensor nodes. Since the environment is noisy and sensor nodes can be 
mobile, the MAC protocol must be power-aware and be able to minimize collision 
with neighbors’ broadcasts. Table 20.1 provides a qualitative overview of MAC 
protocols for sensor networks. 

Regardless of which type of MAC scheme is used for sensor networks, it 
certainly must have built-in power-saving mechanisms and strategies for proper 
management of node mobility or failure. The most obvious means of power con- 
servation is to turn the transceiver off when it is not required. Although this 
power-saving method seemingly provides significant energy gains, an important 
point that must not be overlooked is that sensor nodes communicate using short 
data packets. The shorter the packets, the more the dominance of startup energy. 
Operation in a power-saving mode is energy efficient only if the time spent in that 
mode is greater than, a certain threshold. There can be a number of such useful 
modes of operation for the wireless sensor node, depending on the number of 
states of the microprocessor, memory, A/D converter, and transceiver. Each of 
these modes should be characterized by its power consumption and latency over- 
head, which is the transition power to and from that mode. The main features of 
sensor MAC are periodic listen and sleep, collision and overhearing avoidance, 
and message passing. The duration of the sleep and awake cycles are application- 
dependent and they are set the same for all nodes. 
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Table 20.1 MAC protocols for sensor networks. 


MAC protocol 


Self-organizing Media 
Access Control for 
Sensor networks 
(SMACS) and Eaves- 
drop-and-Register 
(EAR) Algorithm [20] 


Hybrid TDMA/FDMA 
[18] 


CSMA-based [21] 


Channel access mode 


Fixed allocation of 
duplex time slots at 
fixed frequency 


Centralized frequency 
and time division 


Contention-based 
random access 


Sensor network 
specifics 


Exploitation of large 
available bandwidth 
compared to sensor 
data rate 


Optimum number 
of channels calcu- 
lated for minimum 
system energy 


Application phase 
shift and pretrans- 
mit delay 
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Power conservation 


Random wake-up 
during setup and 
turning radio off 

while idle 


Hardware-based 
approach for system 
energy minimization 


Constant listening 
time for energy 
efficiency 


Since a sensor node has limited power resources, forward error correction 
(FEC) is more feasible than automatic repeat request (ARQ), which in a multihop 
sensor network environment is limited by additional retransmission energy cost 


and overhead. 


20.5.3 Network Layer 
The network layer takes care of routing the data supplied by the transport layer. 
The network layer of a sensor network is usually designed according to the 


following principles: 


* Power efficiency is always an important consideration. 


* Sensor networks are mostly data-centric. 


* Data aggregation is useful only when it does not hinder the collaborative 
effort of the sensor nodes. 


* An ideal sensor network has attribute-based addressing and location 


awareness. 


Energy-efficient routes can be found based on the available power in the 
nodes or energy required for transmission in the links along the routes. An energy- 


efficient route is selected by one of the following approaches: 


* The maximum power available (PA) route is the route that has maximum 


total PA. 


* The minimum energy (ME) route is the route that consumes minimum 
energy to transmit the data packets between the sink and sensor nodes. 
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* The minimum hop (MH) route is the route that makes the minimum hop 
to reach the sink. 


* The minimum PÀ node route is the route along which the minimum PA is 
larger than the minimum PAs of the other routes. 


Data aggregation combines data from many sensor nodes into a more com- 
pact form before forwarding to a location for processing. Data aggregation is 
needed to handle the large amount of data generated in sensor networks. 

Another important issue is that routing may be based on the data-centric 
approach. In data-centric routing, interest dissemination is performed to assign 
the sensing tasks to the sensor nodes. There are two approaches used for interest 
dissemination: sinks broadcast the interest and sensor nodes broadcast an adver- 
tisement for the available data and wait for a request from the interested nodes. 

In sensor networks, attribute-based addressing may be required. The user 
is more interested in querying an attribute of the phenomenon, rather than que- 
rying an individual node. Attribute-based addressing is used to carry out queries 
by using the attributes of the phenomenon. Other features include localization 
to determine the physical location of the sensors, fault tolerance, and clock 
synchronization. 

An overview of the network layer protocols proposed for the sensor net- 
works is given in Table 20.2. These protocols need to address higher topology 
changes and higher scalability. 


Table 20.2 An overview of network layer schemes for sensor networks. 


Network layer scheme Description 

Small Minimum Energy Communication Creates a subgraph of sensor network that 

Network (SMECN) [15] contains the minimum energy path 

Flooding Broadcasts data to all neighbor nodes regard- 
less of whether they receive it before or not 

Gossiping [7] Sends data to one randomly selected neighbor 

Sensor Protocols for Information via Nego- Sends data to sensor nodes only if they are 

tiation (SPIN) [8] interested; has three types of messages (i.e., 
ADV, REO, and DATA) 

Sequential Assignment Routing (SAR) [20] Creates multiple trees where the root of each 


tree is one hop neighbor from the sink; select 
a tree for data to be routed back to sink 
according to energy resources and additive 


OoS metric 
Low-Energy Adaptive Clustering Hierarchy Forms clusters to minimize energy dissipation 
(LEACH) [9] 
Directed diffusion [14] Set up gradients for data flow from source to 


sink during interest dissemination 


20.5 Sensor Network Protocol Stack 687 


20.5.4 Transport Layer 

The transport layer helps to maintain the flow of data if the sensor network 
application requires it. The transport layer is needed when a system is planned to 
be accessed through the Internet or other external networks. Transmission control 
protocol (TCP) with its current transmission window mechanisms matches the 
extreme characteristics of the sensor network environment. An approach such 
as TCP splitting may be needed to make sensor networks interact with other 
networks such as the Internet. In this approach, TCP connections are ended at 
sink nodes, and a special transport layer protocol can handle the communication 
between the user and sink nodes. Communication between the user and sink node 
is by user datagram protocol (UDP) or TCP via the Internet or satellite. On the 
other hand, communication between the sink and sensor nodes may be purely by 
UDP-type protocols, because each sensor node has limited memory. 

Event-to-sink reliable transport (ESRT) has been proposed to achieve reli- 
able event detection (at the sink node) with a protocol that is energy aware and 
has congestion control mechanisms. 

The end-to-end communication schemes in sensor networks are not based 
on global addressing. These schemes use attribute-based naming to indicate the 
destinations of the data packets. Factors such as power consumption and scalabil- 
ity, and characteristics such as data-centric routing mean sensor networks need 
different handling in the transport layer. Thus, these requirements stress the need 
for new types of transport layer protocols. 


20.5.5 Application Layer 

Depending on the sensing tasks, different types of application software can be built 
and used on the application layer. Three possible application layer protocols for 
sensor networks are sensor management protocol (SMP), task assignment and data 
advertisement protocol (TADAP), and sensor query and data dissemination pro- 
tocol (SQDDP). An application layer management protocol makes the hardware 
and software of the lower layers transparent to the sensor network management 
applications. System administrators interact with sensor networks by using SMP, 
which provides the software operations needed to perform the following tasks: 


* Introducing the rules related to data aggregation, attribute-based naming, 
and clustering to sensor nodes 


Exchanging data related to the location finding algorithms 
* Time synchronization of sensor nodes 

* Moving sensor nodes 

* Turning the sensor nodes on and off 


Querying the sensor network configuration and status of nodes, and 
re-configuring the sensor network 


Authentication, key distribution, and security in data communications 
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20.5.6 Power, Mobility, and Task Management Planes 
The power, mobility, and task management planes monitor the power, movement, 
and task distribution among sensor nodes. These planes help the sensor nodes 
coordinate the sensing task and lower overall power consumption. The power 
management plane manages how a sensor node uses its power. When the power 
level of a sensor node is low, the sensor node broadcasts to its neighbors that it is 
low in power and cannot participate in routing messages. The remaining power 
is reserved for sensing. The mobility management plane detects and registers the 
movement of sensor nodes, so a route back to the user is always maintained, the 
sensor nodes can keep track of who their neighbor sensor nodes are, and the sen- 
sor nodes can balance their power and task usage. The task management plane 
balances and schedules the sensing tasks given to a specific region. Not all sensor 
nodes in that region are required to perform the sensing task at the same time. As 
a result, some sensor nodes perform the task more than others, depending on their 
power level. These management planes are needed so that sensor nodes can work 
together in power-efficient ways, route data in a mobile sensor network, and share 
resources between sensor nodes. 

Cross layers design is also suggested to avoid conflicting behavior, remove 
unnecessary layers, and provide a new paradigm. 


20.6 ZigBee Technology 

The low rate (LR) wireless personal access network (WPAN) (IEEE 802.15.4/LR- 
WPAN) is intended to serve a set of industrial, residential, and medical applica- 
tions with very low power consumption, low cost requirement, and relaxed needs 
for data rate and QoS [10,11]. The low data rate enables the LR-WPAN to con- 
sume little power. 

ZigBee technology is a low data rate, low power consumption, low cost, wire- 
less networking protocol targeted toward automation and remote control applica- 
tions. The IEEE 802.15.4 committee and ZigBee Alliance worked together and 
developed the technology commercially known as ZigBee. It is expected to provide 
low-cost and low-power connectivity for devices that need battery life as long as 
several months to several years but does not require data transfer rates as high as 
those enabled by Bluetooth. ZigBee can be implemented in mesh (peer-to-peer) 
networks larger than is possible with Bluetooth. ZigBee-compliant wireless devices 
are expected to transmit 10—75 minutes, depending on the RF environment and 
power output consumption required for a given application, and operate in the 
unlicensed RF worldwide (2.4 GHz global, 915 MHz America, or 868 MHz Europe) 
bands. The data rate is 250 kbps at 2.4GHz, 40 kbps at 915 MHz, апа 20kbps at 
868 MHz. 

The IEEE 802.15.4 committee is focusing on the specifications of the lower 
two layers of the protocol (the physical and data link layers). On the other hand, 
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ZigBee Alliance aims to provide the upper layers of the protocol stack (from the 
network to the application layer) for interoperable data interworking, security 
services, and a range of wireless home and building control solutions. ZigBee Alli- 
ance provides interoperability compliance testing, marketing of the standard, and 
advanced product engineering for the evolution of the standard. This will assure 
consumers to buy products from different manufacturers with confidence that 
those products will work together. 

ZigBee often uses a basic master-slave configuration suited to static star net- 
works of many infrequently used devices that talk via small data packets. It allows 
up to 254 nodes. Other network topologies such as peer-to-peer and cluster tree 
are also used. When ZigBee node is powered down, it can wake up and get a 
packet in around 15 msec. 


20.6.1 ZigBee Components and Network Topologies 

A ZigBee system consists of several components. The most basic is the device. A device 
can be a full-function device (FFD) or reduced-function device (RFD). A network 
includes at least one FFD, operating as the personal area network (PAN) coordinator. 
The FFD can operate in three modes: a PAN coordinator, a coordinator, or a device. 
An RED is intended for applications that are extremely simple and do not need to send 
large amounts of data. An FFD can talk to reduced-function or full-function devices, 
while an RFD can only talk to an FFD. 

ZigBee supports three types of topologies: star topology, peer-to-peer topol- 
ogy, and cluster tree (see Figure 20.5). 

In the star topology, communication is established between devices and a 
single central controller, called the PAN coordinator. The PAN coordinator may 
be powered by mains while the devices will most likely be battery powered. Appli- 
cations that benefit from this topology are home automation, personal computer 
(PC) peripherals, toys, and games. 

After an FFD is activated for the first time, it may establish its own network 
and become the PAN coordinator. Each star network chooses a PAN identifier, 
which is not currently used by any other network within the radio sphere of influ- 
ence. This allows each star network to operate independently. 

In the peer-to-peer topology, there is also one PAN coordinator. In contrast 
to star topology, any device can communicate with any other device as long as they 
are in range of one another. A peer-to-peer network can be ad hoc, self-organizing, 
and self-healing. Applications such as industrial control and monitoring, wireless 
sensor networks and asset and inventory tracking would benefit from such a topol- 
ogy. It also allows multiple hops to route messages from any device to any other 
device in the network. It can provide reliability by multipath routing. 

The cluster-tree topology is a special case of a peer-to-peer network in which 
most devices are full-function devices and an RFD may connect to a cluster-tree 
network as a leaf node at the end of a branch. Any of the full-function devices can 
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Figure 20.5 ZigBee topologies. 


act as a coordinator and provide synchronization services to other devices and 
coordinators. However, only one of these coordinators is the PAN coordinator. 
The PAN coordinator forms the first cluster by establishing itself as the clus- 
ter head (CLH) with a cluster identifier (CID) of zero, choosing an unused PAN 
identifier, and broadcasting beacon frames to neighboring devices. A candidate 
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device receiving a beacon frame may request to join the network at the cluster 
head. If the PAN coordinator permits the device to join, it will add this new device 
to its neighbor list. The newly joined device will add the cluster head as its par- 
ent in its neighbor list and begin transmitting periodic beacons such that other 
candidate devices may then join the network at that device. Once application 
or network requirements are met, the PAN coordinator may instruct a device to 
become the cluster head of a new cluster adjacent to the first one. The advantage 
of the clustered structure is the increased coverage at the cost of increased message 
latency. 


20.7 IEEE 802.15.4 LR-WPAN Device Architecture 


Figure 20.6 shows an LR-WPAN device. The device comprises a physical layer 
(PHY), which contains the RF transceiver along with its low-level control mecha- 
nism. A MAC sublayer provides access to the physical channel for all types of 
transfer. The upper layers consist of a network layer, which provides network 
configuration, manipulation, and message routing, and an application layer, which 
provides the intended function of a device. An IEEE 802.2 logical link control (LLC) 
can access the MAC through the service specific convergence sublayer (SSCS). 


Upper layers 


Physical 
Medium 


LLC: Logical link control 


MAC: Media access control 


SSCS: Service specific convergence 
sublayer 


Figure 20.6 LR-WPAN device architecture. 
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20.7.1 Physical Layer 

The PHY (IEEE 802.15.4) provides two services: the PHY data service and PHY 
management service interfacing to the physical layer management entity (PLME). 
The PHY data service enables the transmission and reception of PHY protocol 
data units (PPDUs) across the physical radio channel. The features of the PHY are 
activation and deactivation of the radio transceiver, energy detection (ED), link 
quality indication (LQI), channel selection, clear channel assessment (CCA) and 
transmitting as well as receiving packets across the physical medium. 

The standard provides two options based on the frequency band. Both are 
based on direct sequence spread spectrum (DSSS). The data rate is 250kbps 
at 2.4 GHz, 40 kbps at 915 MHz, and 20 kbps at 868 MHz. The higher rate at 
2.4 GHz is attributed to a higher-order modulation scheme. Lower frequency 
provides longer range due to lower propagation losses. Low rate can be trans- 
lated into better sensitivity and larger coverage area. Higher rate means higher 
throughput, lower latency, or lower duty cycle. Table 20.3 summarizes the 
information. 

There is a single channel between 868 and 868.6 MHz, 10 channels between 
902 and 928 MHz, and 16 channels between 2.4 and 2.4835 GHz (see Table 
20.4). Several channels in different frequency bands enable the ability to relocate 
within the spectrum. The standard also allows dynamic channel selection. MAC 
includes a scan function that steps through a list of supported channels in search 
of a beacon, while the PHY contains several lower-level functions, such as receiver 
energy detection, link quality indication, and channel switching. These functions 
are used by the network to establish its initial operating channel and to change 
channels in response to a prolonged outage. Table 20.4 shows IEEE 802.15.4 
channel frequencies. 


Table 20.3 Frequency bands and data rates. 


Freq. band 
(MHz) and 
number of 

PHY (MHz) channels Spreading parameters Data parameters 

Chip rate Modulation Bit rate Symbol Symbol 
(kcps) (kbps) rate (ksps) 

868/915 868-868.6 300 BPSK 20 20 Binary 
(1 channel) 
902-928 600 BPSK 40 40 Binary 
(10 channels) 

2450 2400-2483.5 2000 OOPSK 250 62.5 16-ary 


(16 channels) orthogonal 


20.7 IEEE 802.15.4 LR-WPAN Device Architecture 693 


Receiver sensitivitiesare — 85 dBm for 2.4 GHzand — 92 dBm for 868/915 MHz. 
The achievable range is a function of receiver sensitivity as well as transmit power. 
The standard specifies that each device should be capable of transmitting 1mW, 
but, depending on the application needs, the actual transmit power may be lower 
(within regulatory limits). Typical devices (1 mW) are expected to cover а 10-20m 
range, with good sensitivity and a moderate increase in transmit power. A star 
topology can provide complete home coverage. For applications allowing more 
latency, mesh network topologies provide an attractive alternative for home cover- 
age since each device needs only enough power (and sensitivity) to communicate 
with its neighbor. 

To maintain a common simple interface with MAC, both PHY share a single 
packet structure (see Figure 20.7). Each PPDU contains a synchronization header 
(preamble plus start of packet delimiter), a PHY header to indicate the packet 
length, and the payload, or PHY service data unit (PSDU). The 32-bit preamble 
is designed for the acquisition of symbol and chip timing, and in some cases may 
be used for coarse frequency adjustment. Channel equalization is not required for 
either PHY due to the combination of small coverage area and relatively low chip 


Table 20.4 IEEE 802.15.4 channel frequencies. 


Channel number Channel center frequency (MHZ) 
k=0 868.3 

k=1,2,..., 10 906 + 2(k — 1) 

k = 11, 12,...,26 2405 + b(k — 11) 


PHY Protocol Data Unit (PPDU) 
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PHY Packet Fields: 

Preamble (32 bits): Synchronization 

Start-of-Packet Delimiter (8 bits): Signify end of preamble 
PHY Header (8 bits): Specify length of PSDU 

PSDU (= 127 bytes): PHY Payload 


Figure 20.7 IEEE 802.15.4 PHY packet structure. 
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rates. Within the PHY header, 7 bits are used to specify the length of the payload 
(in bytes). This supports packets of length 0-127 bytes, although, due to MAC 
layer overhead, zero-length packets will not occur in practice. Typical packet sizes 
for home applications such as monitoring and control security, lighting, air condi- 
tioning, and other appliances are expected to be of the order of 30-60 bytes, while 
more demanding applications such as interactive games and computer peripher- 
als, or multihop applications with more address overhead, may require larger 
packet sizes. Adjusting transmission rates in each frequency band, the maximum 
packet durations are 4.25ms for the 2.4GHz band, 26.6ms for the 915 MHz 
band, and 53.2 ms for the 868 MHz band. 

The 868/915 MHz PHY uses a simple DSSS approach in which each trans- 
mitted bit is represented by a 15-chip maximum length sequence (m-sequence, see 
Chapter 11). Binary data is encoded by multiplying each m-sequence by +1 or 
—1, and the resulting chip sequence is modulated onto the carrier using binary 
phase shift keying (BPSK). Differential data encoding is used prior to modulation 
to allow low-complexity differential coherent reception. 

The 2.4GHz PHY uses a 16-ary quasi-orthogonal modulation technique 
based on DSSS methods. Binary data is grouped into 4-bit symbols, and each 
symbol specifies one of sixteen nearly orthogonal 32-chip, pseudo-random noise 
(PN) sequences for transmission. PN sequences for successive data symbols are 
concatenated, and the aggregate chip sequence is modulated onto the carrier 
using, offset-quadrature phase shift keying (OQPSK). 


20.7.2 Data Link Layer 

The data link layer (IEEE 802.15.4) is divided into two sublayers, the MAC and 
LLC sublayers. The logical link control is standardized in IEEE 802.2 and is com- 
mon among all IEEE 802 standards. The IEEE 802.15.4 MAC provides services 
to an IEEE 802.2 type logical link control through the service-specific conver- 
gence sublayer (SCCS), or a proprietary LLC can access the MAC services directly 
without going through the SCCS. The SCCS ensures compatibility between dif- 
ferent LLC sublayers and allows the MAC to be accessed through a single set of 
access points. 

The features of the IEEE 802.15.4 MAC are association and disassociation, 
acknowledged frame delivery, channel access mechanism, frame validation, guar- 
anteed time slot management, and beacon management. The MAC provides two 
services to higher layers that can be accessed through two service access points 
(SAPs). The MAC data service is accessed through the MAC common part sub- 
layer (MCPS-SAP), and the MAC management services are accessed through the 
MAC layer management entity (MLME-SAP). These two services provide an 
interface between the SCCS or another LLC and the physical layer. 

The MAC management service has 26 primitives, making it very suitable 
for intended low-end applications. The MAC frame structure is very flexible to 
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accommodate the needs of different applications and network topologies while 
maintaining a simple protocol. The general format of a MAC frame is shown in 
Figure 20.8. 

The MAC protocol data unit (MPDU) consists of the MAC header (MHR), 
MAC service data unit (MSDU), and MAC footer (MFR). The first field of 
the MAC header is the frame control field, which indicates the type of MAC 
frame being transmitted, specifies the format of the address field, and controls 
the acknowledgment. The frame control field specifies how the rest of the frame 
looks and what it contains. The size of the address field may vary between 0 and 
20 bytes. The flexible structure of the address field helps to increase the efficiency 
of the protocol by keeping the packet shorts. 

The payload field is variable in length; however, the complete MAC frame 
may not exceed 127 bytes in length. The data contained in the payload is depen- 
dent on the frame type. 

The IEEE 802.15.4 MAC has four different frame types. These are the bea- 
con frame, data frame, acknowledgment frame and MAC command frame. Only 
the data and beacon frames actually contain information sent by higher layers; the 
acknowledgment and MAC command frames originate in the MAC and are used 
for MAC peer-to-peer communication. 


Bytes Variable 


Frame 
Address Check 
Sequence 


MAC MAC 
MAC Header MAC Service Data Unit (MSDU) Footer 
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Figure 20.8 General MAC frame format. 


Frame |Sequence 
Control | Number 


PH 


< 


696 20 Wireless Personal Area Networks: Low Rate and High Rate 


Other fields in the MAC frame are the sequence number and frame 
check sequence (FCS). The sequence number in the MAC header matches the 
acknowledgment frame with the previous transmission. The FCS helps to verify 
the integrity of the MAC frame. The FCS in an IEEE 802.15.4 MAC frame is a 
16-bit International Telecommunication Union—Telecommunication Standard- 
ization Sector (ITU-T) cyclic redundancy check (CRC). 


Superframe Structure 

Some applications may require a dedicated bandwidth to achieve low latencies. 
To accomplish these low latencies, the IEEE 802.15.4 LR-WPAN can operate 
in an optional superframe mode. In a superframe (see Figure 20.9), a dedicated 
PAN coordinator transmits superframe beacons in predetermined intervals. These 
intervals can be as short as 15 ms or as long as 245 seconds. The time between 
two beacons is divided into 16 equal time slots independent of the duration of the 
superframe. The beacon frame is sent in the first slot of each superframe. The bea- 
cons are used to synchronize the attached devices, to identify PAN, and describe 
the structure of superframes. A device can transmit at any time during the slot, 
but must complete its transaction before the next superframe beacon. The channel 
access in time slots is contention based; however, the PAN coordinator may assign 
time slots to a single device that requires a dedicated bandwidth or low latency 
transmissions. These assigned time slots are called guaranteed time slots (GTSs) 
and together form a contention-free period (CFP) located immediately before the 
next beacon. The size of the CFP may vary depending on the demand by the 
associated network devices; when guaranteed time slots are used, all devices must 
complete their contention-based transactions before the CFP begins. The begin- 
ning of the CFP and duration of the superframe are communicated to the attached 
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Figure 20.9 IEEE 802.15.4 superframe structure. 
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network devices by the PAN coordinator. The PAN coordinator may allocate up 
to seven of the GTSs and a GTS can occupy more than one slot period. 


Other MAC Features 


Depending on network configuration, one of two channel access mechanisms can 
be used. In the beacon-enabled network with superframes, a slotted carrier sense 
multiple access-collision avoidance (CSMA-CA) mechanism is used. In networks 
without beacons, unslotted CSMA-CA is used. In a beacon-enabled network, any 
device wishing to transmit during the contention-access period (CAP) waits for 
the beginning of the next time slot and then determines whether another device 
is currently transmitting in the same slot. If another device is already transmit- 
ting in the slot, the device backs off for a random number of slots or indicates a 
transmission failure after some retries. In slotted CSMA-CA, the backoff period 
boundaries of every device in the PAN are aligned with the superframe slot 
boundaries of the PAN coordinator. In unslotted CSMA-CA, the backoff period 
of a device does not need to be synchronized to the backoff period of another 
device. 

An important function of the MAC is to confirm successful reception of a 
received frame. Successful reception and validation of a data or MAC command 
frame is confirmed with an acknowledgment. If the receiving device is unable to 
handle the incoming message for any reason, the receipt is not acknowledged. 
The frame control field in MAC indicates whether or not an acknowledgment is 
expected. The acknowledgment frame is sent immediately after successful valida- 
tion of the received frame. 

Three levels of security are provided: no security of any type; access control 
lists (noncryptographic security); and symmetric key security, using AES-128. 


20.7.3 The Network Layer 

The network layer of Zigbee (IEEE 802.15.4) is responsible for topology con- 
struction and maintenance as well as naming and binding services, which include 
the tasks of addressing, routing, and security. The network layer should be self- 
organizing and self-maintaining to minimize energy consumption and total cost. 
IEEE 802.15.4 supports multiple network topologies, including star, peer-to-peer, 
and cluster tree. The topology is an application design choice. 


Routing Protocol 

Routing protocols for ad hoc networks can be divided into two groups: table- 
driven (proactive) and source-initiated on-demand-driven (reactive) [16,17]. The 
table-driven approach has low latency and high overhead, and is more suitable 
when time constraints are significant. On the other hand, the source-initiated 
on-demand-driven approach has high latency and low overhead. It is more suitable 
for a mobile environment with a limited bandwidth capacity. 
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The table-driven routing protocols attempt to maintain consistent, up-to-date 
routing information from each node to every node in the network. These protocols 
require each node to maintain one or more tables to store routing information, 
and they respond to changes in network topology by propagating route updates 
throughout the network to maintain a consistent view. The destination sequenced 
distance vector (DSDV), wireless routing protocol (WRP), and cluster switch gate- 
way routing (CSGR) protocol belong to this category. 

The source-initiated on-demand-driven routing protocols create routes only 
when desired by a source node. When a node requires a route to a destination, it 
initiates a route discovery process within the network. This process is completed 
once a route is found or all possible route permutations have been examined. The 
ad hoc on-demand distance vector (AODV), dynamic source routing (DSR), tem- 
porally ordered routing algorithm (TORA), and cluster based routing protocol 
(CBRP) belong to this category. 

The ZigBee routing algorithm is based on a hierarchical routing strategy with 
table-driven optimizations applied where possible. Below we provide summaries 
of the AODV and cluster-tree algorithm. 

The AODV is a pure on-demand route acquisition algorithm in which nodes 
that do not lie on active paths neither maintain nor participate in any periodic 
routing table exchanges. Also, a node does not have to discover and maintain 
a route to another node until the two need to communicate, unless the former 
node is offering services as an intermediate forwarding station to maintain con- 
nectivity between two other nodes. The primary objectives of the algorithm are to 
broadcast discovery packets only when necessary in order to distinguish between 
local connectivity management and general topology maintenance and to dissemi- 
nate information about changes in local connectivity to those neighboring mobile 
nodes that are likely to need information. 

When a source node needs to communicate with another node for which it 
has no routing information in its table, the path discovery process is initiated. Every 
node maintains two separate counters: sequence number and broadcast id. The 
source node starts path discovery by broadcasting a route request (RREQ) packet 
to its neighbors, which includes source address; source sequence number; broad- 
cast id; destination address; destination sequence number; and hop count. The 
pair source address, broadcast id uniquely identify an RREQ, where broadcast id 
is incremented whenever the source issues a new RREQ. When an intermediate 
node receives an RREQ, and if it has already received this RREQ with the same 
broadcast id and source address, it drops the redundant RREQ and does not 
rebroadcast it. Otherwise, it rebroadcasts it to its own neighbors after increas- 
ing hop count. Each node keeps the following information: destination address, 
source address, broadcast id, expiration time for reverse path route entry, and 
source node sequence number. As the RREQ travels from a source to a destina- 
tion, it automatically sets up a reverse path from all nodes back to source. To 
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set up a reverse path, a node records the address of the neighbor from which it 
received the first copy of RREQ. These reverse path route entries are maintained 
for at least enough time for the RREQ to traverse the network and produce a 
reply to the sender. 

When the RREQ arrives at a node, possibly the destination itself, that pos- 
sesses a current route to the destination, the receiving node first checks that the 
RREQ was received over a bidirectional link. If this node is not the destination, but 
has the route to the destination, it determines whether the route is current by com- 
paring the destination sequence number in its own route entry to the destination 
sequence number in the RREQ. If the RREQ’s sequence number for the destination 
is greater than that recorded by the intermediate node, the intermediate must not 
use this route to respond to the RREQ, but instead rebroadcast the RREQ. 

If the route has a destination sequence number that is greater than that con- 
tained in the RREQ or equal to that contained in the RREQ but a smaller hop 
count, it can unicast a route reply (RREP) packet back to its neighbor from which 
it received the RREQ. A RREP contains the following information: source address, 
destination address, destination sequence number, hop count, and lifetime. As 
the RREP travels back to the source, each node along the path sets up a forward 
pointer to the node from which the RREP came, updates its time out information 
for route entries to the source and destination, and records the latest destination 
sequence number from the requested destination. 

Nodes that are along the path determined by the RREP will time out after 
the route request expiration timer and delete the reverse pointers since they are 
not on the path from the source to the destination (see Figure 20.10). The value 
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Figure 20.10 Reverse and forward path formation in the AODV protocol. 
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of this time-out time depends on the size of the ad hoc network. Also, there is the 
routing caching time-out that is associated with each route entry to show the time 
after which the route is considered to be invalid. Each time a route entry is used 
to transmit data from a source toward a destination, the time-out for the entry is 
reset to the current time plus active route time-out. 

The source node can begin data transmission as soon as the first RREP is 
received, and can later update its routing information if it learns of a better route. 
Each routing table entry includes the following fields: destination address, next 
hop number of hops, destination sequence number, active neighbor for this route, 
and expiration time for the route table entry. 

For path maintenance, each node keeps the address of active neighbors 
through which packets for the given destination are received. The neighbor is con- 
sidered active if it has originated or relayed at least one packet for that destination 
within the last active time-out period. Once the next hop on the path from the 
source to the destination becomes unreachable, the node upstream of the break 
propagates an unsolicited RREP with a fresh sequence number and hop count of 
infinity to all active upstream nodes. This process continues until all active source 
nodes are notified. Upon receiving the notification of a broken link, the source 
node can start the discovery process if it still requires a route to the destination. 
If it decides that it would like to rebuild the route to the destination, it sends out 
an RREQ with a destination sequence number of one greater than the previously 
known sequence number, to ensure that it builds a new, viable route and no nodes 
reply if they still regard the previous route as valid. 

The cluster tree is a protocol of the logical link and network layer. It uses 
link-state packets to form either a single cluster network or a potentially larger 
cluster tree network. The network is self-organized and supports network redun- 
dancy to attain a degree of fault resistance and self-repair. 

Nodes select a cluster head (CH) and form a cluster according to the self- 
organized manner. The self-developed clusters connect to each other using the 
designated device (DD) (see Figure 20.11). 

The cluster formation process begins with CH selection. After a CH is elected, 
the CH expands links with other member nodes to form a cluster. The CH can be 
selected based on stored parameters of each node, like transmission range, power 
capacity, computing ability, or location information. After becoming the CH, the 
node broadcasts a periodic HELLO message that contains a part of the cluster 
head MAC address and node ID 0 that indicates the CH. The nodes that receive 
this message send a CONNECTION REQUEST message to the CH. When the 
CH receives it, it responds to the node with a CONNECTION RESPONSE mes- 
sage that contains a node ID for the node. The node that is assigned a node ID 
replies with an ACK message to the CH. 

If all nodes are located in the range of the CH, the topology of connection 
becomes a star and every member node is connected to the CH with one hop. 
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Figure 20.11 Cluster tree protocol. 


A cluster can expand into a multihop structure when each node supports multiple 
connections. 

To form a multicluster network, a designated device (DD) is needed. The DD 
has the responsibility of assigning a unique cluster ID to each CH. This cluster 
ID combined with the node ID that the CH assigns to each node within a cluster 
forms a logical address that is used to route packets. Another role of the DD is 
to calculate the shortest route from the cluster to the DD and distribute it to all 
nodes within the network. 

When the DD joins the network, it acts as the CH of cluster 0 and starts to 
send a HELLO message to the neighborhood. If a CH has received this message, 
it sends a CONNECTION REQUEST message and joins the cluster 0. After that, 
the CH requests a cluster ID (CID) to the DD. In this case, the CH is a border 
node that has two logical addresses. One is for a member of the cluster 0 and the 
other is for a CH. When the CH gets a new CID, it informs its member nodes by 
the HELLO message. The border node requests a connection and joins the cluster 
0 as its member node. 

The clusters not bordering cluster 0 use intermediate clusters to get a CID. 
The CH either becomes the border node to its parent cluster or it names a member 
node as the border to its parent cluster. 
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Each member node of the cluster has to record its parent cluster, child/lower 
clusters, and border node IDs associated with the parent and child clusters. The 
DD should store the whole structure of the clusters. The CHs report their link 
state information to the DD. 

A backup DD can be prepared to prevent network down-time due to the DD 
trouble. Inter-cluster communication is realized by routing. The border nodes act 
as routers that connect clusters and relay packets between clusters. When a border 
node receives a packet, it examines the destination address, then forwards it to 
the next border node in the adjacent cluster or to the destination node within its 
own cluster. 

Only the DD can send a message to all nodes within the network. The mes- 
sage is forwarded along the tree route of clusters. The border node should forward 
the broadcast packet from the parent cluster to the child cluster. Table 20.5 lists 
the features of the routing protocols. 


20.7.4 Applications 
The IEEE 802.15.4 has been designed to be useful in a wide variety of applications, 
including sensing and location determination at disaster sites; automotive sensing, 
such as tire pressure monitoring; smart badges and tags; and precision agriculture, 
such as the sensing of soil moisture, pesticide, herbicide, and pH levels. The larg- 
est application opportunities for the IEEE 802.15.4 are in home automation and 
networking including heating, ventilation, air conditioning, security, and lighting; 
the control of objects such as curtains, windows, doors, and locks; health moni- 
toring, including sensors, monitors, and diagnostics; and toys and games. 

The maximum required data rate for these applications is expected to range 
from 115.2kbps for some PC peripherals to less than 10kbps for some home 


Table 20.5 Features of routing protocols for ad hoc networks. 


Features AODV DSDV TORA DSR CBRP 
Loop free Yes Yes Yes Yes Yes 
Multicast Yes No No No No 
Distributed Yes Yes Yes Yes Yes 
Reactive Yes No Yes Yes Yes 
Bidirectional Yes Yes Yes No Yes 
link 

Multiple No No Yes Yes Yes 
routes 

Security No No No No No 
Power No No No No No 


conservation 
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automation and consumer electronics. Message latency is expected to range from 
approximately 15 ms for PC peripherals to 100 ms or more for home automation 
applications. 


20.8 IEEE 802.15.3a— Ultra WideBand 


For wireless personal area networks, which only transmit over small distances 
in which signal propagation loss is small and less variable, greater capacity can 
be achieved through greater bandwidth. The use of ultra wideband (UWB) (see 
Figure 20.12) under FCC guidelines [3] offers tremendous capacity potential over 
short ranges («10 т) at low radiated power (mean effective isotropic radiated 
power [EIRP] of —41.3dBm/MHz). The FCC defines UWB signals as having a 
fractional bandwidth (the ratio of baseband bandwidth to RF carrier frequency) 
of greater than 0.2, or a UWB bandwidth greater than 500 MHz. UWB bandwidth 
is defined as the frequency band bounded by the points that are 10dB below the 
highest radiated emission [6]. 

The growing demand for higher quality multimedia services and faster content 
delivery is driving the quest for higher data rates in communication networks. The 
IEEE 802.15.3a (high rate (HR) WPAN) defined a very high data rate alternative 
physical layer for IEEE 802.15.3 — the current high data rate WPAN standard—to 
deliver data rates from 20 to 55 Mbps over short ranges (less than 10m). 

The FCC approval of UWB devices has prompted many companies to con- 
sider UWB radio when designing physical layers of IEEE 802.15.3a. The FCC 
ruling allows UWB communication devices to operate in an unlicensed spectrum 
from 3.1 to 10.6 GHz. The low emission limits for UWB ensure that UWB devices 
do not cause harmful interference to licensed services and other important radio 
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Figure 20.12 Spectrum of ultrawide band signal compared to Wi-Fi 802.11a signal. 
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operations. Table 20.6 summarizes the guidelines relevant to the use of UWB 
technology in WPAN devices. 

The IEEE 802.15.3a has set out to develop a flexible standard which enables 
high data rate WPAN (110 Mbps at 10m, 200Mbps at 4m, and 480 Mbps at 
2m) using a cost-effective architecture. The standard enables a broad range of 
applications including the wireless transmission of images and video. The IEEE 
802.15.3a is only concerned with physical layer alternatives and uses the same 
MAC sublayer as IEEE 802.15.3. The IEEE 802.15.3a task group established 
technical requirements and selection criteria for the physical layer (see Table 20.7). 
The task group set forth goals for low-power consumption and low-cost devices 
to ensure that the standard could be implemented in CMOS technology. 

Presently, the IEEE 802.15.3a task group is left with two proposals: (1) an 
orthogonal frequency division multiplexing (OFDM)-based multiband approach, 
which uses 528 MHz channels (three mandatory lower band channels and four 
optional upper band channels) supported by multiband OFDM, and (2) a dual- 
band impulse radio (IR) spread spectrum approach, where there is a high band 
(above 5.2—5.8 GHz unlicensed band) and a lower band (from 3.1 GHz to just 
below е 5.2-5.8 GHz unlicensed band), and which exploits all of the UWB spec- 
trum allocation. 

In a channelized UWB system, the UWB frequency band from 3.1 to 10.6 GHz 
is divided into several smaller bands. Each of these bands must have a bandwidth 
greater than 500 MHz to comply with the FCC definition of UWB. Frequency 
hopping between these bands is used to facilitate multiple access. 

There are three group A bands which are used for standard operation. 
The group C bands are allocated for optional use in areas where simultaneous 


Table 20.6 FCC guidelines for UWB technology in WPAN devices. 


Operating Frequency Range 3.1 to 10.6 GHz 
Average Radiated Emission Limits 


Frequency range (MHz) EIRP in dBm/MHz (indoor environment 
for handheld device) 


960-1610 —75.3/—75.5 
1610-1900 —53.3/—63.3 
1900-3100 —51.3/—61.3 
3100-10,600 —41.3/— 41.3 
Above 10,600 —51.3/—61.3 


Peak emission level in band: 60dB above average emission level 


Maximum unacknowledged transmission period: 10 seconds 
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Table 20.7 Summary of technical requirements and selection criteria of IEEE 
802.15.3a physical layer. 


Parameter Details 

Data rates 110, 220, and 480 (optional) Mbps 

Range 10m, 4m and 2m 

Power consumption 100 mW апа 250 mW 

Power management modes Capabilities such as power saving, wake-up, etc. 
Co-located piconets 4 

Interference susceptibility Robust to IEEE systems, PER <8% for a 1024 


byte packet 


Co-existence capability Reduced interference to IEEE systems, inter- 
fering average power at least 6dB below the 
minimum sensitivity level of non-802.15.3a 


device 

Cost Similar to Bluetooth 

Location awareness Location information to be propagated to a 
suitable management entity 

Scalability Backward compatibility with IEEE 802.15, 
adaptable to various regulatory regions 

Signal acquisition «20 ps for acquisition from the beginning of 
the preamble to the beginning of the header 

Antenna practicality Size and form factor consistent with original 
device 


operating piconets are in close proximity. Groups B and D are reserved for future 
use. Each band uses frequency hopping-orthogonal frequency division multiplex- 
ing (FH-OFDM). Because of the increased length of the OFDM symbol period, 
this modulation scheme can successfully reduce the effects of inter-symbol inter- 
ference (ISI). However, this increases the transceiver complexity. 

In the impulse radio spread-spectrum approach, very short duration (sub- 
nano second) pulses transmit over each band, with the bandwidth in excess of 
1 GHz used. The root raised cosine pulse shaping provides the spectrum roll-off 
that is required. The phase of the pulse is inverted to give simple BPSK modula- 
tion. Code sequences are used to transmit user data. The codes are selected to 
be as orthogonal as possible. The code sequences are designed to appear as 
pseudo-random strings. The design uses a direct sequence spread spectrum with 
24 chips per symbol. 

Tables 20.8 and 20.9 provide overviews of two UWB approaches. Impulse 
radio, the traditional approach to UWB communication, has greater precision 
for position location, and realizes better spectrum efficiency compared to multi- 
band UWB. 
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Table 20.8 Overview of multiband-OFDM physical layer proposal (supported by 


multiband OFDM coalition). 


Number of bands 
Bandwidth 


Frequency range 


Modulation scheme 

Coexistence method 

Multiple access method 

Number of simultaneous piconets 
Error correction codes 


Code rates 


Link margin 


Multipath mitigation 


Spectrum allocation 


3 (first generation bands); 10 optional bands 
528 MHz 


Group A: 3.168-4.752 GHz; Group В: 4.752- 
6.072 GHz; Group C: 6.072-8.184 GHz; Group 
D 8.184-10.296 GHz 


FH-OFDM (with 128-point FFT), OPSK 
Null band for WLAN (~5 GHz) 

Time frequency interleaving 

4 

Convolution codes 


11/32 @ 110 Mbps; 5/8 @ 200 Mbps; 
3/4 @ 480 Mbps 


5.3dB @ 10m @110 Mbps; 10 dB @ 4m @ 
200 mbps; 11.5 dB @ 2m @ 480 Mbps 


1-tap (robust to 60.6ns delay spread) 


Table 20.9 Overview of impulse radio (IR) spread spectrum UWB. 


Number of bands 

Bandwidths 

Frequency ranges 

Modulation scheme 

Coexistence method 

Multiple access method 

Number of simultaneous piconets 
Error correction codes 


Code rates 


Link margin 


Chip duration 
Multipath mitigation 


Spectrum Allocation 


2 

1.368 GHz, 2.736 GHz 

3.2-5.15 GHz; 5.825-10.6 GHz 

BPSK, OPSK, DSSS 

Null band for WLAN (-5 GHz) 

CDMA 

8 

Convolution codes and Reed-Solomon codes 


1/2 @ 110 Mbps; RS (255,223) @ 200 Mbps; 
RS (255,233) @ 480 Mbps 


6.7dB @ 10m @ 114Mbps; 11.9dB @ 4m 
@ 200 Mbps; 1.7 dB @ 2m @ 600 Mbps 


731 ps (low band); 365.5 ps (high band) 


Decision feedback equalizer and Rake receiver 
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However, it has less flexibility with respect to foreign spectral regulation and 
may be too broadband if foreign governments choose to limit their UWB spectral 
allocations to smaller ranges than authorized by the FCC. The other advantages 
of the multiband UWB scheme are: 


* More scalable and adaptive than single band designs 


* Better co-existence characteristics with systems such as IEEE 802.11a due 
to adaptive selection of the bands 


* Lower risk of implementations because it leverages more traditional radio 
design techniques. 


In the multiband UWB system information is independently encoded in the 
different bands instead of being transmitted in a single pulse, this process results 
in very high bit rate systems realized with relatively low signaling rates. Since a 
much lower signaling rate than that for a single band UWB system is required for 
the same data rate, most of the electronics can run at lower speed and, therefore, 
the complexity, cost, and integration concerns are reduced. 

The multiband OFDM (MB-OFDM) UWB is supported by the WiMedia 
Alliance, whereas direct sequence UWB (DS-UWB) is supported by the UWB 
forum. The WiMedia Alliance is a not-for-profit open industry association that 
promotes and enables the rapid adoption, regulation, standardization, and mul- 
tivendor interoperability of UWB worldwide. WiMedia UWB is optimized for 
wireless personal area networks delivering high-speed (480 Mbps and beyond), 
low-power multimedia capabilities for PC, consumer electronics, mobile, and 
automotive market segments. WiMedia UWB has been selected by the Bluetooth 
Special Interest Group (SIG) and USB Implementers Forum as the foundation 
radio of their high-speed wireless specifications for the next generation consumer 
electronics, mobile, and computer applications. 


20.9 Radio Frequency Identification 

Radio frequency identification (RFID) is an automatic identification method, rely- 
ing on storing and remotely retrieving data using devices called RFID tags or tran- 
sponders. An RFID tag is an object that can be attached to or incorporated into 
a product, animal, or person for the purpose of identification using radio waves. 
Chip-based RFID tags contain silicon chips and antennas. Passive tags require no 
internal power source, whereas active tags require a power source. RFID is also 
called dedicated short range communication (DSRC). 

In a typical RFID system, individual objects are equipped with a small, inex- 
pensive tag. The tag contains a transponder with a digital memory chip that is 
given a unique electronic product code. The transponder emits messages with an 
identification number that is retrieved from a database and acted upon accord- 
ingly. The writable memory is used to transmit information among RFID readers 
in different locations. 
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The interrogator, an antenna packaged with a transceiver and decoder, emits 


a signal activating the RFID tag so it can read and write data to it. When an RFID 
tag passes through the electromagnetic zone, it detects the reader’s activation sig- 
nal. The reader decodes the data encoded in the tag’s integrated circuit (silicon 
chip) and the data is passed to the host computer. The application software on the 
host processes the data, and may perform various filtering operations to reduce 
the numerous often redundant reads of the same tag to a smaller and more useful 
data set. 


The following are the RFID components and their characteristics: 
Tags 

+ Active (with watch-sized battery) 

• Passive (without battery) 

• Semi-active (with battery) 

* Size (varies from less than 1 square inch to many square inches) 


— Dependent on power and frequency (13.56 MHz, 433 MHz, 900 MHz, 
2.4 GHz with power from 1mW to 1 №) 

— Memory can be read only, write one and read many with 1 byte to 
512 Kilo-bytes storage. 


Reader 

+ Receive data 

« Validate data 

• Send data to tag 
Middleware 


Host data management software applications 
The following are the key features of RFID: 


No line-of-sight. RFID tags do not need to be visible to read or write. 


Robust. Because RFID systems do not need to be visible, they can be encased 
within rugged material protecting them from the environment in which they 
are being used. This means they can be used in harsh fluid and chemical 
environments and rough handling situations. 


Read speed. Tags can be read from significant distances and can also be read 
very quickly —for example, on a conveyor. 

Reading multiple items. A number of tagged items can be read at the same 
time within an RF field. This cannot be done easily with visual identifiers. 
Security. Because tags can be enclosed, they are much more difficult to tam- 
per with. A number of tag types now also come programmed with a unique 
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identifier (serial identification) which is guaranteed to be unique throughout 
the world. 


* Programmability. Many tags are read/write capable, rather than read only. 
This means that information can be written to the tag, perhaps to show 
that the item being tagged has gone through a particular process, or that its 
condition or status has changed somehow. 


RFID systems can be used just about anywhere, from clothing tags to mis- 
siles to pet tags to food — anywhere that a unique identification system is needed. 
The tag can carry information as simple as a pet owner's name and address or 
the cleaning instructions on a sweater to as complex as instructions on how to 
assemble a car. Some auto manufacturers use RFID systems to move cars through 
an assembly line. At each successive stage of production, the RFID tag tells the 
computers what the next step of the automated assembly is. The following are 
some of the applications of RFID systems: 


* Automotive. Auto makers have added security and convenience to auto- 
mobiles by using RFID technology for anti-theft immobilizers and passive- 
entry systems. 


* Animal tracking. Ranchers and livestock producers use RFID technology 
to meet export regulations and optimize livestock value. Wild animals are 
tracked in ecological studies, and many pets who are tagged are returned to 
their owners. 


* Assets tracking. Hospitals and pharmacies meet tough product accountabil- 
ity legislation with RFID; libraries limit theft and keep books in circulation 
more efficiently; and sports and entertainment entrepreneurs find that *smart 
tickets" are their ticket to a better bottom line and happier customers. 


* Contactless commerce. Blue-chip companies such as American Express, 
Exxon Mobile, and MasterCard use innovative form factors enabled by 
RFID technology to strengthen brand loyalty and boost revenue per 
customer. 


* Supply chain. Wal-Mart, Target, Best Buy, and other retailers have discovered 
that RFID technology can keep inventories at the optimal level, reduce out- 
of-stock losses, limit shoplifting, and speed customers through check-out 
lines. 


RFID tags are often envisioned as a replacement for bar codes, having a 
number of important advantages over bar code technology. One of the key dif- 
ferences between RFID and bar code technology is RFID eliminates the need of 
line-of-sight reading that bar coding depends on. Also, RFID scanning can be 
done at greater distances than bar code scanning. High frequency RFID systems 
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(850-950 MHz, 2.4-2.5 GHz) offer transmission ranges more than 90 feet. Ваг 
codes are fixed at the time of printing and can be rendered useless by defacement 
or smudging. Bar codes can be spoofed or easily defeated by any malicious indi- 
vidual having a laser printer at their disposal. 


20.10 Summary 


In this chapter we first focused on wireless sensor networks and then discussed 
the IEEE 802.15.3, 802.15.3a, and 802.15.4 standards. The IEEE 802.15.4 is 
the approved low-rate standard for wireless sensor networks, whereas the IEEE 
802.15.3a is the high-rate wireless personal area network standard that deals with 
ultra wideband (UWB) network devices. We discussed the uses of wireless sen- 
sor networks, wireless sensor network models, wireless sensor network protocol 
stacks, and Zigbee technology. We then presented details of the physical and data 
link layers in LR-WPAN devices. The chapter concluded by presenting require- 
ments for HR-WPAN, the current status of the IEEE 802.15.3a standard, and 
radio frequency identification (RFID) techniques. 


Problems 
20.1 What is a wireless sensor network? 


20.2 Discuss various uses of wireless sensor networks. 
20.3 What is the ZigBee technology? Discuss briefly. 
20.4 Discuss different types of network topology that are supported in ZigBee. 


20.5 The IEEE standard provides two options for physical layers in LR-WPAN 
devices. Discuss them. 


20.6 List the features of the IEEE 802.15.4 MAC. 
20.7 What are the IEEE 802.15.4 MAC management services? 
20.8 Discuss the routing protocols used for ad hoc networks. 


20.9 Briefly discuss the AODV and cluster-tree routing protocol used іп 
ZigBee. 


20.10 What is a UWB device according to the FCC? 


20.11 Discuss technical requirements and selection criteria of the IEEE 
802.15.3a. 


20.12 Briefly discuss the two proposals which the IEEE 802.15.3a task group 
is considering for approval. 


20.13 What is RFID? Discuss some of its applications. 
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CHAPTER 21 


Wireless Local Area Networks 


21.1 Introduction 

With the success of wired local area networks (LANs), the local computing market 
is moving toward wireless LAN (WLAN) with the same speed of current wired 
LAN. WLANs are flexible data communication systems that can be used for appli- 
cations in which mobility is required. In the indoor business environment, although 
mobility is not an absolute requirement, WLANs provide more flexibility than 
that achieved by the wired LAN. WLANs are designed to operate in industrial, 
scientific, and medical (ISM) radio bands (see Table 21.1) and unlicensed-national 
information infrastructure (U-NII) bands. In the United States, the Federal Com- 
munications Commission (FCC) regulates radio transmissions; however, the FCC 
does not require the end-user to buy a license to use the ISM or U-NII bands. 
Currently, WLANs can provide data rates up to 11 Mbps, but the industry is mak- 
ing a move toward high-speed WLANs. Manufacturers are developing WLANs to 
provide data rates up to 54 Mbps or higher. High speed makes WLANs a promising 
technology for the future data communications market [7]. 

The IEEE 802.11 committee is responsible for WLAN standards. WLANs 
include IEEE 802.11a (WiFi 5), IEEE 802.11b (WiFi), IEEE 802.11g and IEEE 
802.11n (see Figure 21.1). The deployment of WLANS can provide connectivity 
in homes, factories, and hot-spots. The IEEE 802.16 group is responsible for wire- 
less metropolitan area network (WMAN) standards. This body is concerned with 
fixed broadband wireless access systems, also known as *last mile" access net- 
works. In this chapter, we focus on different types of WLANs and introduce IEEE 
802.16 standards including WiMAX (high speed WLAN) [1,18,19]. Table 21.2 
lists all subgroups of IEEE 802.11. 


Table 21.1 Industrial, scientific, and medical (ISM) bands. 


No. Band (GHz) Bandwidth (MHz) Power level Spread spectrum 
1 0.902-0.928 26 1W FHSS, DSSS 

2 2.4-2.4835 83.5 1W FHSS, DSSS 

3 5.725-5.850 125 1W FHSS, DSSS 

4 24.0-24.5 250 50 mW/m @ 3m Not Applicable 
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802.2 LLC 


802.1 Bridging 
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802.11 MAC 


802.11n 
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OFDM DSSS OFDM 
5GHz Wi-Fi >20 Mbps 


Figure 21.1 IEEE 802.11 WLAN standards. 


Table 21.2 IEEE 802.11 subgroups. 


802.11a High speed physical layer in 5GHz band 

802.11b Higher speed physical layer extension of wireless in 2.4GHz band 
802.11d Local and metropolitan area wireless 

802.11g Broadband wireless 

802.11i Security 

802.11n Wideband service 


WLANS are flexible data communications systems implemented as an extension 
or as an alternative for wired LANs. Using radio frequency (RF) technology, WLANs 
transmit and receive data over the air, minimizing the need for wired connections. 
Thus, WLANs combine data connectivity with user mobility [3-6,8,14—16]. 

Recently, manufacturers have deployed WLANs for process and control 
applications. Retail applications have expanded to include wireless point of sale 
(WPOS). The health-care and education industry are also fast-growing markets 
for WLANs. WLANs provide high-speed, reliable data communications іп а 
building or campus environment as well as coverage in rural areas. WLANs are 
simple to install. Figure 21.2 provides application fields of WLANs. 

In WLANs, the connection between the client and the user is accomplished 
by the use of a wireless medium such as RF or Infrared (IR) communications 
instead of a cable. This allows a remote user to stay connected to the network 
while mobile or not physically attached to the network. The wireless connection 
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Figure 21.2 WLAN application. 


is usually accomplished by the user having a hand-held terminal or laptop that has 
an RF interface card installed inside the terminal or through the PC card slot of 
the laptop. The client connection from the wired LAN to the user is made through 
an access point (AP) that can support multiple users simultaneously. The AP can 
reside at any node on the wired network and acts as a gateway for wireless users' 
data to be routed onto the wired network. 

The range of a WLAN depends on the actual usage and environment of the 
system. It may vary from 100 feet inside a solid walled building to several thou- 
sand feet in an outdoor environment with direct line-of-sight. Much like cellular 
phone systems WLANs are capable of roaming from the AP and reconnecting to 
the network through other APs residing at other points in the network. This can 
allow the wired LAN to be extended to cover a much larger area than the existing 
coverage by the use of multiple APs. 

An important feature of WLANS is that they can be used independently 
of wired networks. They can be used as stand-alone networks anywhere to link 
multiple computers together without having to build or extend wired networks. 
The network communications take place in a part of the radio spectrum that is 
designed as license free. In this band, 2.4-2.5 GHz, users can operate without a 
license so as long as they use equipment that has been of the type approved for use 
in the license-free band. The 2.4-2.5 GHz band has been designated as license free 
by the international telecommunications Union (ITU), and is available as license 
free in most countries of the world. 

Standard WLANs are capable of operating at speeds in the range of 1-2 Mbps 
depending on the actual system; both of these speeds are supported by the stan- 
dard for WLANs defined by the IEEE. The fastest WLANs use 802.11b high-rate 
standard to move data through air at a maximum speed of 11 Mbps. The IEEE 
established the 802.11b standard for wireless networks and the wireless compat- 
ibility Ethernet alliance to assure that WLAN products are interoperable from 
manufacturer to manufacturer. Any LAN application, network operating systems, 
or protocol, including transmission control protocol/Internet protocol (TCP/IP) 
will run on 802.11b-compliant WLANs as easily as they run over the Ethernet. 
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The following are a few advantages of deploying WLANs: 


* Mobility improves productivity with real-time access to information, regardless 
of worker location, for faster and more efficient decision making 


* Cost-effective network setup for hard-to-wire locations such as older buildings 
and solid wall structures 


* Reduced cost of ownership, particularly in a dynamic environment requiring 
frequent modification due to minimal wiring and installation costs per device 
and per user 


However, there are several issues that should be considered in deploying the 
WLAN including: 


* Frequency allocation: Operation of a wireless network requires that all 
users operate in a common frequency band. The frequency band must be 
approved in each country. 


e Interference and reliability: In a wired LAN, one hears only the terminals 
connected to the network.In a WLAN, interference is caused by simultaneous 
transmission of information in the shared frequency band and by multipath 
fading. The reliability of a communication channel is measured by bit error 
rate (BER). Automatic repeat request (ARQ) and forward error correction 
(FEC) techniques are used to increase reliability. 


* Security: Radio waves are not confined to the boundary of buildings or 
campuses. There exists the possibility of eavesdropping and intentional 
interference. Data privacy over a radio medium is usually accomplished by 
using encryption. 


* Power consumption: WLANs are typically related to mobile applications. 
In these applications, battery power is a scarce resource. Therefore, the 
devices must be designed to be energy efficient. 

* Mobility: One of the advantages of a WLAN is the freedom of mobility. 
The devices should accommodate handoff at transmission boundaries to 
route data calls to mobile users. 

• Throughput: To support multiple transmissions simultaneously, spread 
spectrum techniques are often used. 


21.2 WLAN Equipment 
There are three main links that form the basis of the wireless network. These are: 
* LAN adapter: Wireless adapters are made in the same basic form as their 
wired counterparts: PCMCIA, Card bus, PCI, and USB. They also serve 


the same function, enabling end-users to access the network. In a wired 
LAN, adapters provide an interface between the network operating system 
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and the wire. In a WLAN, they provide the interface between the network 
operating system and an antenna to create a transparent connection to the 
network. 


* Access point (AP): The AP is the wireless equivalent of an LAN hub. It 
receives, buffers, and transmits data between the WLAN and the wired 
network, supporting a group of wireless user devices. An AP is typically 
connected with the backbone network through a standard Ethernet cable, 
and communicates with wireless devices by means of an antenna. The AP 
or antenna connected to it is generally mounted on a high wall or on the 
ceiling. Like cells in a cellular network, multiple APs can support handoff 
from one AP to another as the user moves from area to area. APs have a 
range from 20 to 500 meters. A single AP can support between 15 to 250 
users, depending on technology, configuration, and use. It is relatively 
easy to scale a WLAN by adding more APs to reduce network conges- 
tion and enlarge the coverage area. Large networks requiring multiple 
APs deploy them to create overlapping cells for constant connectivity to 
the network. A wireless AP can monitor movement of a client across its 
domain and permit or deny specific traffic or clients from communicating 
through it. 


Outdoor LAN bridges: Outdoor LAN bridges are used to connect LANs 
in different buildings. When the cost of buying a fiber optic cable between 
buildings is considered, particularly if there are barriers such as highways or 
bodies of water in the way, a WLAN can be an economical alternative. An 
outdoor bridge can provide a less expensive alternative to recurring leased- 
line charges. WLAN bridge products support fairly high data rates and 
ranges of several miles with the use of line-of-sight directional antennas. 
Some APs can also be used as a bridge between buildings of relatively close 
proximity. 


21.3 WLAN Topologies 
WLANS can be built with either of the following topologies: 


* Peer-to-peer (ad hoc) topology 
* Access point-based topology 
* Point-to-multipoint bridge topology 


In peer-to-peer topology, client devices within a cell communicate directly to 
each other as shown in Figure 21.3. 

AP-based technology uses access points to bridge traffic onto a wired (Ethernet 
or Token Ring) or a wireless backbone as shown in Figure 21.4. AP enables a 
wireless client device to communicate with any other wired or wireless device on 
the network. AP-based topology is more commonly used and demonstrates that 
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Figure 21.3 Peer-to-peer topology (Ad hoc Network). 
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Figure 21.4 Access point-based topology. 


the WLAN does not replace the wired LAN, it extends connectivity to mobile 
devices. 

Another wireless network topology is the point-to-multipoint bridge. Wire- 
less bridges connect LANs in one building to LANs in another building even if the 
buildings are miles apart. These conditions receive a clear line-of-sight between 
buildings. The line-of-sight range varies based on the type of wireless bridge and 
antenna used as well as environmental conditions. 
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21.4 WLAN Technologies 

The technologies available for use ina WLAN include infrared, UHF (narrowband), 
and spread spectrum implementation. Each implementation comes with its own set 
of advantages and limitations. 


21.4.1 Infrared Technology 

Infrared is an invisible band of radiation that exists at the lower end of the visible 
electromagnetic spectrum. This type of transmission is most effective when a clear 
line-of-sight exists between the transmitter and the receiver. 

Two types of infrared WLAN solutions are available: diffused-beam and 
direct-beam (or line-of-sight). Currently, direct-beam WLANs offer a faster data 
rate than the diffused-beam networks. Direct-beam is more directional since 
diffused-beam technology uses reflected rays to transmit/receive a data signal. 
It achieves lower data rates in the 1-2 Mbps range. 

Infrared is a short-range technology. When used indoors, it can be limited 
by solid objects such as doors, walls, merchandise, or racking. In addition, the 
lighting environment can affect signal quality. For example, loss of communica- 
tion may occur because of the large amount of sunlight or background light in an 
environment. Fluorescent lights also may contain large amounts of infrared. This 
problem may be solved by using high signal power and an optimal bandwidth 
filter, which reduces the infrared signals coming from an outside source. In an 
outdoor environment, snow, ice, and fog may affect the operation of an infrared- 
based system. Table 21.3 gives considerations for choosing infrared technology. 


21.4.2 UHF Narrowband Technology 

UHF wireless data communication systems have been available since the early 
1980s. These systems normally transmit in the 430 to 470 MHz frequency range, 
with rare systems using segments of the 800MHz range. The lower portion 
of this band— 430-450 MHz —is referred to as the unprotected (unlicensed), and 
450—470 MHz is referred to as the protected (licensed) band. In the unprotected 
band, RF licenses are not granted for specific frequencies and anyone is allowed to 
use any frequencies, giving customers some assurance that they will have complete 
use of that frequency. 


Table 21.3 Considerations for choosing infrared technology. 


Advantages No government regulations controlling use 
Immunity to electro-magnetic (EM) and RF interference 

Disadvantages Generally a short-range technology (30-50 ft radius under ideal conditions) 
Signals cannot penetrate solid objects 
Signal affected by light, snow, ice, fog 


Dirt can interfere with infrared 


720 21 Wireless Local Area Networks 


Because independent narrowband RF systems cannot coexist on the same 
frequency, government agencies allocate specific RFs to users through RF site 
licenses. A limited amount of unlicensed spectrum is also available in some coun- 
tries. In order to have many frequencies that can be allocated to users, the band- 
width given to a specific user is very small. 

The term narrowband is used to describe this technology because the RF 
signal is sent іп a very narrow bandwidth, typically 12.5 kHz or 25 kHz. Power 
levels range from 1 to 2 watts for narrowband RF data systems. This narrow 
bandwidth combined with high power results in larger transmission distances 
than are available from 900 MHz or 2.4 GHz spread spectrum systems, which 
have lower power levels and wider bandwidths. Table 21.4 lists the advantages 
and disadvantages of UHF technology. 

Many modern UHF systems are synthesized radio technology. This refers 
to the way channel frequencies are generated in the radio. The crystal-controlled 
products in legacy UHF products require factory installation of unique crystals 
for each possible channel frequency. Synthesized radio technology uses a single, 
standard crystal frequency and drives the required channel frequency by dividing 
the crystal frequency down to a small value, then multiplying it up to the desired 
channel frequency. The division and multiplication factors are unique for each 
desired channel frequency, and are programmed into digital memory in the radio 
at the time of manufacturing. Synthesized UHF-based solutions provide the abil- 
ity to install equipment without the complexity of hardware crystals. Common 
equipment can be purchased and specific UHF frequency used for each device 
can be tuned based upon specific location requirements. Additionally, synthesized 
UHF radios do not exhibit the frequency drift problem experienced in crystal 
controlled UHF radios. 

Modern UHF systems allow APs to be individually configured for operation 
on one of the several preprogrammed frequencies. Terminals are programmed 
with a list of all frequencies used in the installed APs, allowing them to change 
frequencies when roaming. To increase throughput, APs may be installed with 
overlapping coverage but use different frequencies. 


Table 21.4 Considerations for choosing UHF technology. 


Advantages Longest range 


Low cost solution for large sites with low to medium data throughput 
requirements 


Disadvantages Large radio and antennas increase wireless client size 
RF site license required for protected bands 
No multivendor interoperability 


Low throughput and interference potential 
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21.4.3 Spread Spectrum Technology 

Most WLANs use spread spectrum technology, a wideband radio frequency 
technique that uses the entire allotted spectrum in a shared fashion as opposed to 
dividing it into discrete private pieces (as with narrowband). The spread spectrum 
system (see Chapter 11) spreads the transmission power over the entire usable spec- 
trum. This is obviously a less efficient use of the bandwidth than the narrowband 
approach. However, spread spectrum is designed to trade off bandwidth efficiency 
for reliability, integrity, and security. The bandwidth trade-off produces a signal 
that is easier to detect, provided that the receiver knows the parameters of the 
spread spectrum signal being broadcast. If the receiver is not tuned to the right 
frequency, a spread spectrum signal looks like background noise. 

By operating across a broad range of radio frequencies, a spread spectrum 
device could communicate clearly despite interference from other devices using the 
same spectrum in the same physical location. In addition to its relative immunity 
to interference, spread spectrum makes eavesdropping and jamming inherently 
difficult. 

In commercial applications, spread spectrum techniques currently offer data 
rates up to 2 Mbps. Because the FCC does not require site licensing for the bands 
used by spread spectrum systems, this technology has become the standard for 
high-speed RF data transmission. Two modulation schemes are commonly used 
to encode spread spectrum signals: direct sequence spread spectrum (DSSS) and 
frequency hopping spread spectrum (FHSS). 

FHSS uses a narrowband carrier that changes frequency in a pattern known 
to both transmitter and receiver. Properly synchronized, the net effect is to main- 
tain a single logical channel. To an unintended receiver, FHSS appears to be a 
short-duration impulse noise. 

DSSS generates a redundant bit pattern for each bit to be transmitted. This 
bit pattern is called a spreading code. The longer the code, the greater the prob- 
ability that the original data can be recovered (and, of course the more band- 
width will be required). To an unintended receiver DSSS appears as low-power, 
wideband noise and is rejected by most narrowband receivers. 


21.5 IEEE 802.11 WLAN 

In 1997 the IEEE developed an international standard for WLANs: IEEE 
802.11-1997. This standard was revised in 1999. Like other IEEE 802 standards, 
the 802.11 standard focuses on the bottom two layers of the OSI model, the 
physical layer (PHY) and data link layer (DLL). Because of the common interface 
provided to upper layers, any LAN application, network operating system, or 
protocol including TCP/IP and Novell Netware will run on an 802.11-compliant 
WLAN. The objective of the IEEE 802.11 standard was to define an medium 
access control (MAC) sublayer, MAC management protocols and services, and 
three PHYs for wireless connectivity of fixed, portable, and moving devices within 
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a local area. The three physical layers are an IR baseband PHY, an FHSS radio 
in the 2.4 GHz band, and a DSSS radio in the 2.4 GHz. All three physical layers 
support both 1 and 2 Mbps operations. 

WLANs support asynchronous data transfers that refer to the traffic that is rel- 
atively insensitive to time delays such as electronic mail and file transfers. Optionally 
WLANs can also support the traffic, which is bounded by the specified time delay, to 
achieve an acceptable quality of service (QoS), such as packetized voice and video. 


21.5.1 IEEE 802.11 Architecture 

The architecture of the IEEE 802.11 WLAN is designed to support a network 
where most decision making is distributed to mobile stations. This type of archi- 
tecture has several advantages. It is tolerant of faults in all of the WLAN equipment 
and eliminates possible bottlenecks a centralized architecture would introduce. 
The architecture is flexible and can easily support both small, transient networks 
and large, semipermanent or permanent networks. In addition, the architecture 
and protocols offer significant power saving and prolong the battery life of mobile 
equipment without losing network connectivity. 

Two network architectures are defined in the IEEE 802.11 standard: 


* Infrastructure network: An infrastructure network is the network archi- 
tecture for providing communication between wireless clients and wired 
network resources. The transition of data from the wireless to wired medium 
occurs via an AP. An AP and its associated wireless clients define the coverage 
area. Together all the devices form a basic service set (see Figure 21.5). 


Point-to-point (ad hoc) network: An ad hoc network is the architecture 
that is used to support mutual communication between wireless clients. 
Typically, an ad hoc network is created spontaneously and does not support 
access to wired networks. An ad hoc network does not require an AP. 


IEEE 802.11 supports three basic topologies for WLANs: the independent 
basic service set (IBSS), the basic service set, and the extended service set (ESS). 
The MAC layer supports implementations of IBSS, basic service set, and ESS 
configurations. 


* The IBSS configuration is referred to as an independent configuration or an 
ad hoc network. An IBSS configuration is analogous to a peer-to-peer office 
network in which no single node is required to act as a server. IBSS WLANs 
include a number of nodes or wireless stations that communicate directly 
with one another on an ad hoc, peer-to-peer basis. Generally, IBSS imple- 
mentations cover a limited area and are not connected to any large network. 
An IBSS is typically a short-lived network, with a small number of stations, 
that is created for a particular purpose. 


* The basic service set configuration relies on an AP that acts as the logical server 
for a single WLAN cell or channel. Communications between station 1 and 
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Figure 21.5 BSS and ESS configuration of IEEE 802.11 WLAN. 


station 4 actually flow from station 1 to AP1 and then from AP1 to AP2 and 
then from AP2 to AP4 and finally AP4 to station 4 (refer to Figure 21.4). An 
AP performs a bridging function and connects multiple WLAN cells or chan- 
nels, and connects WLAN cells to a wired enterprise LAN. 


The ESS configuration consists of multiple basic service set cells that can 
be linked by either wired or wireless backbones called a distributed system. 
IEEE 802.11 supports ESS configurations in which multiple cells use the 
same channel, and configurations in which multiple cells use different chan- 
nels to boost aggregate throughput. To network the equipment outside of 
the ESS, the ESS and all of its mobile stations appear to be a single MAC- 
layer network where all stations are physically stationary. Thus, the ESS 
hides the mobility of the mobile stations from everything outside the ESS 
(see Figure 21.5). 


21.5.2 802.11 Physical Layer (PHY) 

At the physical layer, IEEE 802.11 defines three physical characteristics for WLANs: 
diffused infrared (baseband), DSSS, and FHSS. All three support a 1 to 2 Mbps data 
rate. Both DSSS and FHSS use the 2.4 GHz ISM band (2.4—2.4835 GHz). The physi- 
cal layer provides three levels of functionality. These include: (1) frame exchange 
between the MAC and PHY under the control of the physical layer convergence 
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procedure (PLCP) sublayer; (2) use of signal carrier and spread spectrum (SS) 
modulation to transmit data frames over the media under the control of the physical 
medium dependent (PMD) sublayer; and (3) providing a carrier sense indication 
back to the MAC to verify activity on the media (see Figure 21.6). 

Each of the physical layers is unique in terms of the modulation type, 
designed to coexist with each other and operate with the MAC. The specifications 
for IEEE 802.11 meet the RF emissions guidelines of FCC, ETSI, and the Ministry 
of Telecommunications. 


DSSS PHY 

In the DSSS PHY, data transmission over the media is controlled by the PMD sub- 
layer as directed by the PLCP sublayer. The PMD sublayer takes the binary infor- 
mation bits from the PLCP protocol data unit (PPDU) and converts them into RF 
signals by using modulation and DSSS techniques (see Figure 21.7). Figure 21.8 
shows the PPDU frame, which consists of a PLCP preamble, PLCP header, and 
MAC protocol data unit (MPDU). The PLCP preamble and PLCP header are 
always transmitted at 1 Mbps, and the MPDU can be sent at 1 or 2Mbps. 

The start of frame delimiter (SFD) contains information that marks the start of 
the PPDU frame. The SFD specified is common for all IEEE 802.11 DSSS radios. 

The signal field indicates which modulation scheme should be used to receive 
the incoming MPDU. The binary value in this field is equal to the data rate mul- 
tiplied by 100 kbps. Two modulation schemes, differential binary phase shift 
keying (DBPSK)—for 1Mbps—and differential quadrature phase shift keying 
(DQPSK)— for 2 Mbps—are available. 

The service field is reserved for future use. The length field indicates the 
number of microseconds necessary to transmit the MPDU. The MAC layer uses 
this field to determine the end of a PPDU frame. 

The CRC field contains the results of a calculated frame check sequence 
from the sending station. The ITU CRC-16 error detection algorithm is used to 
protect the signal, service, and length field. 


MAC Layer 


PHY Convergence 


Pysieah Payer Procedure (PCLP) 


Management 


PHY Medium 
Dependent (PMD) 


Figure 21.6 OSI model for IEEE 802.11 WLAN. 
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Figure 21.7 Transmit and receive DSSS PPDU. 
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Figure 21.8 DSSS PHY PPDU frame. 


The SYNC field is 128 bits (symbols) in length and contains a string of 1s 
which are scrambled prior to transmission. The receiver uses this field to acquire 
the incoming signal and to synchronize the receiver’s carrier tracking and timing 
prior to receiving the SFD. The SFD field contains information to mark the start of 
the PPDU frame. The SFD specified is common for all IEEE 802.11 DSSS radios. 

All information bits transmitted by the DSSS PMD are scrambled using a 
self-synchronizing 7-bit polynomial. An 11-bit Barker code (1, —1, 1, 1, —1, 1, 
1, 1, —1, —1, —1) is used for spreading. In the transmitter, the 11-bit Barker code 
is applied to a modulo-2 adder together with each of the information bits in the 
PPDU. The output of the modulo-2 adder results in a signal with a data rate that 
is 10 times higher than the information rate. The result in the frequency domain 
is a signal that is spread over a wide bandwidth at a reduced RF power level. 
Every station in the IEEE 802.11 network uses the same 11-bit sequence. At the 
receiver, the DSSS signal is convolved with the same 11-bit Barker code and cor- 
related. The minimum requirement for processing gain (Ср) in North America 
and Japan is 10 dB. 
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Each DSSS PHY channel occupies 22 MHz of bandwidth and allows for 
three noninterfering channels spaced 25 MHz apart in the 2.4 GHz frequency 
band (see Figure 21.9). With this channel arrangement, a user can configure 
multiple DSSS networks to operate simultaneously in the same area. Table 21.5 
lists the DSSS channels used in different parts of the world. Fourteen frequency 
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Figure 21.9 Channel spacing for IEEE 802.11 DSSS networks. 


Table 21.5 DSSS channels for different parts of the world. 


Channel Frequency North 
number GHz America Europe Spain France Japan 
1 2.412 x x 
2 2.417 x x 
3 2.422 x x 
4 2.427 x x 
5 2.432 х х 
6 2.437 х х 
7 2.442 х х 
8 2.447 х х 
9 2.452 х х 
10 2.457 х х х х 
11 2.462 х х х х 
12 2.467 х х 
13 2.472 х х 


= 
D 


2.483 x 
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Table 21.6 Maximum allowable transmit power. 


Country Power 


North America 1000 mW 
Europe 100 mW 
Japan 10 mW/Hz 


channels are defined for operation across the 2.4GHz frequency band. In North 
America 11 frequencies are used ranging from 2.412 to 2.462 GHz. In Europe 
13 frequencies are allowed between 2.412 and 2.472 GHz. In Japan only channels 
at the 2.483 GHz frequency are permitted. 

The maximum allowable radiated power for DSSS PHY varies from region 
to region (refer to Table 21.6). The transmit power is directly related to the range 
that a particular implementation can achieve. 


Example 21.1 

A QPSK/DSSS WLAN is designed to transmit in the 902-928 MHz ISM band. 
The symbol transmission rate is 0.5 Mega symbols/sec. An orthogonal code with 
16 symbols is used. A bit error rate of 10 ? is required. How many users can be 
supported by the WLAN? A sector antenna with a gain of 2.6 is used. Assume 
interference factor B = 0.5 to account for the interference from users in other cells 
and power control efficiency a = 0.9. What is the bandwidth efficiency? 


Solution 


By = 928 — 902 = 26 MHz 


Ry = Ков 16 = 2Mbps 


= 26 _ 
Gp = 26 = 13 
= -5 _1 Ep 
Py = 10 5 erfc No 
. Eb _ 
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Gp 1 А 13 


x 1. .x2.66x092-2 


Е «АСУ ^ SERES 


(EUN) 1+B 


_2х2_ 
т 36 0.16 bps/Hz 


728 21 Wireless Local Area Networks 


FHSS PHY 

In FHSS PHY, data transmission over media is controlled by the FHSS PMD 
sublayer as directed by the FHSS PLCP sublayer. The FHSS PMD takes the binary 
information bits from the whitened PSDU and converts them into RF signals by 
using carrier modulation and FHSS techniques (see Figure 21.10). 

The format of the PPDU is shown in Figure 21.11. It consists of the PLCP 
preamble, PLCP header, and PLCP service data unit (PSDU). The PLCP preamble 
is used to acquire the incoming signal and synchronize the receiver's demodulator. 
The PLCP header contains information about PSDU from the sending physical 
layer. The PLCP preamble and header are transmitted at 1 Mbps. 

The sync field contains a string of alternating Os and 1s pattern and is used by 
the receiver to synchronize the receiver's packet timing and correct for frequency 
offsets. 

The SFD field contains information marking the start of a PSDU frame. 
FHSS radios usea000011001011110 1 bit pattern. The leftmost bit is 
transmitted first. 

The PLCP length word (PLW) field specifies the length of the PSDU in octets 
and is used by the MAC layer to detect the end of a PPDU frame. 

The PLCP signaling field (PSF) identifies the data rate of the whitened PSDU 
ranging from 1 to 4.5 Mbps in increments of 0.5 Mbps. 

The header error check field contains the results of a calculated frame check 
sequence from the sending station. The ITU CRC-16 error detection algorithm is 
used to protect the PSF and PLW fields. 

Data whitening is used for the PSDU before transmission to minimize DC 
bias on the data if long strings of 1s or 05 are contained in the PSDU. The PHY 
stuffs a special symbol every 4 octets of the PDSU in a PPDU frame. A 127-bit 
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Figure 21.10 FHSS PHY transmitter and receiver. 
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Figure 21.11 FHSS PHY PPDU frame. 


sequence generator using the polynomial x” + x* + 1 and a 32/33 bias-suppression 
encoding algorithm are used to randomize and whiten the data. 

The FHSS PMD uses two-level Gaussian frequency shift key (GMSK) modu- 
lation to transmit the PSDU at the basic rate of 1 Mbps. Four-level GFSK is an 
optimal modulation scheme defined in the standard that enables the whitened 
PSDU to be transmitted at a higher rate. The value in the PSF field of the PLCP 
header is used to determine the data rate of the PSDU. 

In GFSK modulation, the frequency is shifted on either side of the carrier 
hop frequency depending on whether the binary symbol from the PSDU is either 
a 1 or 0. For two-level GFSK, a binary 1 represents the upper deviation frequency 
(fc + Af) from the hopped carrier, and binary 0 represents the lower deviation 
frequency (f. = Af), where f; is the carrier hopped frequency and Af the devia- 
tion frequency. The deviation frequency should be greater than 110kHz for IEEE 
802.11 FHSS radios. Four-level GFSK is similar to 2-level GFSK and is used to 
achieve a data rate of 2Mbps in the same occupied frequency bandwidth. The 
symbol pairs (1 0, 1 1, 0 1, 0 0) generate four frequency deviations from the 
hopped carrier frequency, two upper and two lower. 

A set of hop sequences is defined in IEEE 802.11 for use in the 2.4 GHz 
frequency band. The channels are evenly spaced across the band over a span of 
83.5 MHz. In North America and Europe (except France and Spain) the num- 
ber of hop channels is 79. The number of hop channels for Spain and France 
are 23 and 35, respectively. In Japan the required number of hop channels is 23. 
The hop channels are spaced uniformly across the 2.4 GHz frequency band occu- 
pying a bandwidth of 1 MHz. In North America and Europe (except Spain and 
France) the hop channels operate from 2.402 to 2.480 GHz and in Japan, 2.473 to 
2.495 GHz. In Spain the hop channels operate from 2.447 to 2.473 GHz, and in 
France from 2.448 to 2.482 GHz. Channel 2 is the first hop channel located at the 
center frequency of 2.402 GHz and channel 95 is the last hop frequency channel at 
2.495 GHz in the 2.4 GHz band. 

Channel hopping is controlled by FHSS PMD. The FHSS PMD transmits the 
whitened PSDU by hopping from channel to channel in a pseudo-random fashion 
using one of the hopping sequences. In the United States, FHSS radios hop a mini- 
mum 2.5 hops per second for a minimum hop distance of 6 MHz. 
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The hopping sequences for IEEE 802.11 are grouped in hopping sets for 
worldwide operation: Set 1, Set 2, and Set 3. The sequences are selected when 
FHSS basic service set is configured for a WLAN. The hopping sets are designed 
to minimize interference between neighboring FHSS radios in a set. The following 
hop sets are valid IEEE 802.11 hopping sequences in North America and most of 
Europe (except Spain and France). 


* Set 1: (0, 3, 6, 9, 12, 15, 18, 21, 24, 27, 30, 33, 36, 39, 42, 45, 48, 51, 54, 
57, 60, 63, 66, 69, 72, 75) 

e Set 2: (1, 4, 7, 10, 13, 16, 19, 22, 25, 28, 31, 34, 37, 40, 43, 46, 49, 52, 55, 
58, 61, 64, 67, 70, 73, 76) 

e Set 3: (2, 5,8, 11, 14, 17, 20, 23, 26, 29, 32, 35, 38, 41, 44, 47, 50, 53, 56, 
59, 62, 65, 68, 71, 74, 77) 


802.11a— Orthogonal Frequency Division Multiplexing (OFDM) 
The OFDM PHY provides the capability to transmit PSDU frames at multiple 
data rates up to 54 Mbps for a WLAN where the transmission of multimedia 
content is a consideration. The OFDM PHY defined for IEEE 802.11a is similar 
to the OFDM PHY specification of ETSI-HIPERLAN 2. 

The PPDU is unique to the OFDM PHY. The PPDU frame consists of a PLCP 
preamble and signal and data fields (see Figure 21.12). The receiver uses the PLCP 
preamble to acquire the incoming OFDM signal and synchronize the demodulator. 
The PLCP header contains information about the PSDU from the sending OFDM 
PHY. The PLCP preamble and the signal fields are always transmitted at 6 Mbps, 
BPSK-OFDM modulated using a convolutional encoding rate R = '/. 

PLCP preamble field is used to acquire the incoming signal and train and 
synchronize the receiver. The PLCP preamble consists of 12 symbols, 10 of which 
are short symbols, and 2 long symbols. The short symbols are used to train the 
receiver's automatic gain control (AGC) and obtain a coarse estimate of the carrier 
frequency and the channel. The long symbols are used to fine-tune the frequency 
and channel estimates. Twelve subcarriers are used for the short symbols and 
53 for the long. The training of an OFDM is accomplished in 16 ws. The PLCP 
preamble is BPSK-OFDM modulated at 6 Mbps. 

The signal is a 24-bit field that contains information about the rate and length 
of the PSDU. The signal field is convolutional encoded rate R = 1⁄2, BPSK-OFDM 
modulated. Four bits are used to encode the rate, eleven bits are used to define the 
length, one reserved bit, a parity bit, and six 0 tail bits (see Table 21.7). 

The length field is an unsigned 12-bit integer to indicate the number of octets 
in the PSDU. 

The data field contains the service field, PSDU, tail bits, and pad bits. 
A total of six tail bits containing Os are appended to the PPDU to ensure that the 
convolutional encoder is brought back to the zero state. 
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Figure 21.12 OFDM PLCP preamble, header, and PSDU. 


Table 21.7 PSDU data rate. 


Rate (Mbps) Modulation Coding rate Signal bits 
6 BPSK В = 1 1101 
9 BPSK R= °/, 1111 
12 QPSK R= 1 0101 
18 OPSK R-3/ 0111 
24 16-0AM В = 1 1001 
36 (optional) 16-OAM R = 3/4 1011 
48 (optional) 64-OAM R = 2/3 0001 
54 (optional) 64-OAM В = 3/4 0011 


All the bits transmitted by the OFDM PMD in the data portion are scram- 
bled using a frame-synchronous 127-bit sequence generator. Scrambling is used to 
randomize the service, PSDU, pad bit, and data patterns, which may contain long 
strings of binary 1s or Os. The tail bits are not scrambled. 

All information contained in the service, PSDU, tail, and pad are encoded 
using convolutional encoding R = 1/2, 2/3, or 3/4 corresponding to the desired 
data rate. Puncture codes are used for the higher data rates. 
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In OFDM modulation, the basic principal of operation is to divide a high-speed 
binary signal to be transmitted into a number of lower data rate subcarriers. There are 
48 data subcarriers and 4 carrier pilot subcarriers for a total of 52 nonzero subcar- 
riers defined in IEEE 802.11a. Each lower data rate bit stream is used to modulate a 
separate subcarrier from one of the channels in the 5 GHz band. Intersymbol interfer- 
ence is generally not a concern for a lower speed carrier; however, the subchannels 
may be subjected to frequency selective fading. Therefore, bit interleaving and convo- 
lutional encoding is used to improve the BER performance. The scheme uses integer 
multiples of the first subcarrier, which are orthogonal to each other. Prior to transmis- 
sion, the PPDU is encoded using a convolutional coded rate R = '/2, and the bits are 
reordered and bit interleaved for the desired data rate. Each bit is then mapped 
into a complex number according to the modulation type and subdivided into 
48 data subcarriers and 4 pilot subcarriers. The subcarriers are combined using 
an inverse fast Fourier transform and transmitted. At the receiver, the carrier is 
converted back to a multicarrier lower data rate form using an fast frequency 
transform (FFT). The lower data subcarriers are combined to form the high rate 
PPDU. Figure 21.13 shows IEEE 802.11a OFDM PMD. 


The 5 GHz frequency band is segmented into three 100 MHz bands for opera- 
tion in the United States. The lower band ranges from 5.15-5.25 GHz, the middle 
band ranges from 5.25-5.35 GHz, and the upper band ranges from 5.725—5.825 GHz. 
The lower and middle bands accommodate 8 channels in a total bandwidth of 
200 MHz and the upper band accommodates 4 channels in a 100 MHz bandwidth. 
The frequency channel center frequencies are spaced 20 MHz apart. The outermost 
channels of the lower and middle bands are centered 30 MHz from the outer edges. 
In the upper band the outermost channel centers are 20 MHz from the outer edges. 


Transmit OFDM PMD 
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Figure 21.13 IEEE 802.11a transmit and receive OFDM PMD. 
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Table 21.8 Channel frequencies and channel numbers in the United States. 


Regulatory domain Frequency band Channel number Center frequencies 
USA Lower Band 36 5.180 GHz 
5.15-5.25 GHz 40 5.220 GHz 
44 5.220 GHz 
48 5.240 GHz 
USA Middle Band 52 5.26 GHz 
5.25-5.35 GHz 56 5.280 GHz 
60 5.300 GHz 
64 5.320 GHz 
USA Upper Band 149 5.745 GHz 
153 5.765 GHz 
157 5.785 GHz 
161 5.805 GHz 


Table 21.9 Transmit power levels for North American operation. 


Frequency band Max. transmit power with 6 dBi antenna gain 
5.150-5.250 GHz 40 mW (2.5 mW/MHz) 
5.250-5.350 GHz 200 mW (12.5 mW/MHz) 
5.725-5.825 GHz 800 mW (50 mW/MHz) 


The channel frequencies and numbering defined in 802.11a start at 5 GHz and each 
channel is spaced 5 GHz apart (see Table 21.8). 

Three transmit RF power levels are specified: 40 mW, 200 mW, апа 800mW 
(see Table 21.9). The upper band defines RF transmit power levels suitable for 
bridging applications while the lower band specifies a transmit power suitable for 
short-range indoor home and small office environments. 


Example 21.2 

Consider an FH/MFSK WLAN system, in which a pseudo-random noise (PN) 
generator is defined by a 20-stage linear feedback shift register with a maximal 
length sequence. Each state of the register dictates a new center frequency within 
the hopping band. The minimum step-size between center frequencies (hop to 
hop) is 200 Hz. The register clock rate is 2kHz. 8-ary FSK modulation is used 
and the data rate is 1.2 kbps. (a) What is the hopping bandwidth? (b) What is 
the chip-rate? (c) How many chips are there in each data symbol? (d) What is the 
processing gain? 
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Solution 
Af = 200Hz 
Minimum number of chips = 20 
Number of tones contained in spreading bandwidth (Bss) = 220 = 1,048,576 


Bss 


1,048,576 = 200 


^ Bss = 209,715,200 = 209.715 MHz 


Chip rate = 1.2 X 20 = 24 kchip/sec 


. 209.715 x 10° _ 174,762.5 


Processing gain (G 
в gain (Gp) 1.2 x 10? 


Symbol rate — 12x10 = 400 symbols/sec 


3 
24 X 103 _ cg 


N f chi 1 = 
umber of chips рег symbo 100 


Example 21.3 

The IEEE 802.11a WLAN uses a 64-subchannel implementation of multicarrier 
modulation (MCM, i.e., OFDM). Forty-eight subcarriers are used for information 
transmission, 4 subcarriers for pilot tones are used for synchronization, and 12 are 
reserved. Each subchannel has a symbol rate of 250 kilo symbols per second (ksps). 
The occupied bandwidth is 20 MHz. Find the bandwidth of a subchannel. What is 
modulation efficiency? What is a user symbol rate? If 16-QAM modulation is used, 
what is the user data rate if the information bits are encoded with a rate of 3/4? If the 
guard time between two transmitted symbols is 800 ns, what is the time utilization 
efficiency of the system? 


Solution 


e Total number of subcarriers = 48 + 12 + 4 = 64 


e Bandwidth of subchannels = 20 x 10" = 312.5kHz 


* Modulation efficiency = 250 = (ug symbols/sec/Hz 


312.5 
* User symbol transmission rate = 48 x 250 = 1.2 Msps 


* User bit per symbol = 4 for 16-QPSK modulation 
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* User data rate = < x 4 х 12 = 36 Mbps 


e Symbol duration = 1 = 4000ns 
250 x 10° 
, PNE ..4000 _ 
* Time utilization efficiency ERI 0.83 


Example 21.4 

A WLAN is required to have the minimum Ej/No of 10dB in an indoor office 
environment. The background noise at 2.4 GHz is —120dBM. If the transmit 
power is 20 mW and there is no line-of-sight (NLOS) between the AP and mobile 
terminals, what is the coverage of the AP? Assume a data rate of 1 Mbps and 
channel bandwidth of 0.5 MHz. Use the joint technical commitee (JTC) path loss 
model in which for NLOS conditions in the indoor office environment, path loss 
at the first meter (A) is 37.7 dB and path loss exponent, y, is 3.3. Assume power 
loss from the floors to be 19dB and a shadow effect of 10 dB. 


Solution 
* Required Š = Er x È = 10 x d- = 204В 
0 w . 
* Transmit power = 10log20 = 13dBm 


e Receiver sensitivity = —120 + 20 = —100 dBm 
e Maximum allowable path loss = 13 — (—100) = 113dB 


e Lp = A + 10ylogd + L/(n) + Xo 


where: 
A = path loss at the first meter 
y = path loss exponent 


Ly = function relating power loss with number of floors, n 
X, = lognormally distributed random variable representing the shadow effect 
d = distance between AP and mobile terminal 


113 = 37.7 + 33logd + 19 + 10 
-.d = 25.3 meters 


21.5.3 IEEE 802.11 Data Link Layer 

The data link layer within 802.11 consists of two sublayers: logical link con- 
trol (LLC) and media access control (MAC). 802.11 uses the same 802.2 LLC 
and 48-bit addressing as the other 802 LAN, allowing for simple bridging from 
wireless to IEEE wired networks, but the MAC is unique to WLAN. The sublayer 
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above MAC is the LLC, where the framing takes place. The LLC inserts certain 
fields in the frame such as the source address and destination address at the head 
end of the frame and error handling bits at the end of the frame. 

The 802.11 MAC is similar in concept to 802.3, in that it is designed to 
support multiple users on a shared medium by having the sender sense the medium 
before accessing it. For the 802.3 Ethernet LAN, the carrier sense multiple access 
with collision detection (CSMA/CD) protocol regulates how Ethernet stations 
establish access to the network and how they detect and handle collisions that 
occur when two or more devices try to simultaneously communicate over the 
LAN. In an 802.11 WLAN, collision detection is not possible due to the near/far 
problem (see Chapter 11). To detect a collision, a station must be able to transmit 
and listen at the same time, but in radio systems the transmission drowns out the 
ability of a station to hear a collision. 


21.5.4 IEEE 802.11 Medium Access Control 

Wireless local area networks operate using a shared, high bit rate transmission 
medium to which all devices are attached and information frames relating to all 
calls are transmitted. MAC sublayer defines how a user obtains a channel when 
he or she needs one. 

MAC schemes include random access, order access, deterministic access, and 
mixed access. The random access MAC protocols are: ALOHA (asynchronous, 
slotted), carrier-sense multiple-access (CSMA) (CSMA/collision-detection (CD), 
CSMA/collision-avoidance (CA), non-persistent, and p-persistent). The maxi- 
mum throughput of slotted ALOHA protocol is about 36% of the data rate of 
the channel (see Chapter 5). It is simple, but not very efficient. Most WLANs 
implement a random access protocol, CSMA/CA with some modification, to deal 
with the hidden node problem. The CSMA peaks at about 60%. When the traffic 
becomes heavy, it degrades badly. The way of dealing with that situation is to use 
p-persistent. Most mobile data networks also use random access protocol, usually 
one that is simpler than CSMA, namely slotted ALOHA. Table 21.10 provides a 
comparison of MAC schemes for wireless networks. 

Deterministic MAC schemes improve throughput and response time when 
traffic is heavy. They offer the guaranteed bandwidth for isochronous traffic. 
In mixed cases such as CSMA/TDMA, the frame is divided into a random access 
part and a reserved part. When the traffic is light, it is left to be mostly random. 
When the traffic is heavy and throughput is in danger of declining or if a node 
requires isochronous bandwidth, the control point allocates bandwidth determin- 
istically. CSMA/TDMA approaches CSMA performance under light traffic, so it 
has fast access time. It approaches TDMA performance when the traffic becomes 
heavy, so its throughput can rise close to 10096 of the data rate. 

TEEE 802.11 uses a modified protocol known as carrier sense multiple access 
with collision avoidance (CSMA/CA) or distributed coordination function (DCF). 
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Table 21.10 Comparison of MAC access schemes in wireless networks. 


Access Protocols Characteristics 


Random CSMA * Under light load—fast response time 


. 


Under heavy load—throughput declines 


* Simple to implement 


Deterministic FDMA * Able to provide guaranteed bandwidth 
TDMA * Larger average delay compared to random access 
CDMA * Smaller delay variance 

Mixed CSMA/TDMA * Under light load —fast response time 


. 


Under heavy load—throughput approaches TDMA 


• 


Higher overhead compared to random апа 
deterministic access 


CSMA/CA attempts to avoid collisions by using explicit packet acknowledgment 
(ACK), which means an ACK packet is sent by the receiving station to confirm 
that the data packet arrived intact. 

The CSMA/CA protocol is very effective when the medium is not heav- 
ily loaded since it allows stations to transmit with minimum delay. But there is 
always a chance of stations simultaneously sensing the medium as being free and 
transmitting at the same time, causing a collision. These collisions must be identi- 
fied so that the MAC layer can retransmit the packet by itself and not by the upper 
layers, which would cause significant delay. In the Ethernet with CSMA/CD the 
collision is recognized by the transmitting station, which goes into a retransmis- 
sion phase based on an exponential random backoff algorithm. While these colli- 
sion detection mechanisms are a good idea on a wired LAN, they cannot be used 
on a WLAN environment for two main reasons: 


* Implementing a collision detection mechanism would require the implemen- 
tation of a full duplex radio capable of transmitting and receiving at the 
same time, an approach that would increase the cost significantly. 


* [n a wireless environment we cannot assume that all stations hear each 
other (which is the basic assumption of the collision detection scheme), and 
the fact that a station wants to transmit and senses the medium as free does 
not necessarily mean that the medium is free around the receiver area. 


To overcome these problems, the 802.11 uses a CA mechanism together 
with a positive ACK. The MAC layer of a station wishing to transmit senses the 
medium. If the medium is free for a specified time, called distributed inter-frame 
space (DIFS), then the station is able to transmit the packet; if the medium is 
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busy (or becomes busy during the DIFS interval) the station defers using the expo- 
nential backoff algorithm. 

This scheme implies that, except in cases of very high network congestion, 
no packets will be lost because retransmission occurs each time a packet is not 
acknowledged. This entails that all packets sent will reach their destination in 
sequence. 

The 802.11 MAC layer provides for two other robustness features: cycle 
redundancy check (CRC) checksum and packet fragmentation. Each packet has a 
CRC checksum calculated and attached to ensure that the data was not corrupted 
in transmit. This is different from the Ethernet, where higher-level protocols such 
as TCP handle error checking. 

Packet fragmentation allows large packets to be segmented into smaller 
units when sent over the medium. This is useful in very congested environments 
or when interference is a factor, since large packets have a better chance of being 
corrupted. This technique reduces the need for retransmission in many cases and 
improves overall wireless network performance. The MAC layer is responsible for 
reassembling fragments received, rendering the process transparent to higher-level 
protocols. The following are some of the reasons it is preferable to use smaller 
packets ina WLAN environment: 


* Due to higher BER of a radio link, the probability of a packet getting 
corrupted increases with packet size. 


* In case of corrupted packets (either due to collision or interference), smaller 
packets cause less overhead. 

* On an FHSS system the medium is interrupted periodically for hopping. 
With smaller packets the chance that the transmission will be postponed 
after dwell time is reduced. 


A simple send-and-wait algorithm is used at the MAC sublayer. In this mech- 
anism the transmitting station is not allowed to transmit a new packet until one 
of the following happens: 


* Receives an ACK for the packet, or 


* Decides that packet was retransmitted too many times and drops the whole 
frame. 


Exponential Backoff Algorithm 

Backoff is a scheme commonly used to resolve contention problems among 
different stations wishing to transmit data at the same time. When a station goes 
into the backoff state, it waits an additional, randomly selected number of time 
slots (in 802.11b a slot has a 20 us duration and the random number must be 
greater than 0 and smaller than a maximum value referred to as the contention 
window (CW)). During the wait, the station continues sensing the medium to 
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check whether it remains free or another transmission begins. At the end of its 
contention window, if the medium is still free the station can send its frame. If 
during the contention window another station begins transmitting data, the back- 
off counter is frozen and counting down starts again when the channel returns to 
the idle state. 

There is a problem related to the CW dimension. With a small CW, if many 
stations attempt to transmit data at the same time it is very possible that some 
of them may have the same backoff interval. This means that there will continu- 
ously be collisions, with serious effects on the network performance. On the other 
hand, with a large CW, if few stations wish to transmit data they will likely have 
long backoff delays resulting in the degradation of the network performance. The 
solution is to use an exponentially growing CW size. It starts from a small value 
(CWmin = 31) and doubles after each collision, until it reaches the maximum 
value СҰ лах (С\ лах = 1023). In 802.11 the backoff algorithm must be executed 
in three cases: 


* When the station senses the medium is busy before the first transmission of 
a packet 


e After each retransmission 


e After a successful transmission 


This is necessary to avoid a single host wanting to transmit a large quantity 
of data, occupying the channel for too long a period, and denying access to all 
other stations. The backoff mechanism is not used when the station decides to 
transmit a new packet after an idle period and the medium has been free for more 
than the DIFS (see Figure 21.14). 


The transmission time for a data frame = PLCP + D) us 


where: 


DIFS DIFS 


Contention Window 


« 
Busy Medium J ЖД Window // Next Frame 
R Slot-time 
А Defer Access sla Select Slot and decrement backoff as 


long as medium is idle 


Figure 21.14 CSMA/CA in IEEE 802.11b. 
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PLCP - the time required to transmit the physical layer convergence protocol 


(PLCP) 


D = the frame size 
R = the channel bit rate 


CSMA/CA packet transmission time = BO + DIFS + 2PLCP + А + SIFS + aus 


where: 


A = the ACK frame size 
BO = the backoff time 


DIFS = the distributed inter-frame space 


SIFS = the short inter-frame space 


The loss of performance strongly depends on the packet size and data rate, 


but a 30% loss is more than likely to occur. The smaller the packets, the larger 
will be the impact of CSMA/CA on network performance. To evaluate the perfor- 
mance impact of CSMA/CA it is important to know how the various inter-frame 
spaces are defined. The 802.11 standard defines the following four inter-frame 
spaces to provide different priorities. 


Short inter-frame space (SIFS): It is used to separate transmissions belong- 
ing to a single dialog (e.g., fragment-ACK), and is the minimum inter-frame 
space. There is always at most one single station to transmit at any given 
time, therefore giving it priority over all other stations. This value is fixed 
per PHY and is calculated in such a way that the transmitting station will 
be able to switch back to receive mode and be capable of decoding the 
incoming packet. For the 802.11 DSSS PHY the value is 10 ps. 


Point coordinate inter-frame space (PIFS): It is used by the AP to gain access 
to the medium before any other station. This value is SIFS plus a slot time 
(1.e., 30 ps). 

Distributed inter-frame space (DIFS): It is the inter-frame space used for a 
station willing to start a new transmission. It is calculated as PIFS plus one 
slot time (i.e., 50 us). 

Extended inter-frame space (EIFS): It is the longer inter-frame space used 
by a station that has received a packet which it could not understand. This 
is required to prevent the station (which could not understand the duration 
information for the virtual carrier sense) from colliding with a future packet 
belonging to the current dialog. 


Hidden and Exposed Node Problem 

Another major MAC layer problem specific to a WLAN is the hidden node issue, 
in which two stations on opposite sides of an AP can both hear activity from 
an AP, but not from each other, usually due to distance or an obstruction (see 
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Figure 21.15a). To solve this problem, 802.11 specifies an optional request to 
send/clear to send (RTS/CTS) protocol at the MAC layer. When this feature is in 
use, a sending station transmits an RTS and waits for the AP to reply with a CTS. 
Since all stations in the network can hear the AP, the CTS causes them to delay 
any intended transmissions, allowing the sending station to transmit and receive 
a packet acknowledgment without any chance of collision. Since RTS/CTS adds 
additional overhead to the network by temporarily reserving the medium, it is 
typically used only on the largest-sized packets, for which transmission would be 
expensive from a bandwidth standpoint. This mechanism reduces the probability 
of a collision on the receiver area by a station that is hidden from the transmitter 
to the short duration of the RTS transmission, because all stations hear the CTS 
and make the medium busy until the end of the transaction. The duration infor- 
mation on the RTS also protects the transmitter area from collisions during the 
ACK (from stations that are out of range of the acknowledged station). It should 
also be noted that, due to the fact that RTS and CTS are short frames, the mecha- 
nism also reduces the overhead of collisions, since these frames are recognized 
faster than if the whole packet were to be transmitted. The mechanism is con- 
trolled by a parameter called RTS threshold, which, if used, must be set on both 
the AP and the client side. 

The time required to transmit a frame, taking into account the RTS/CTS 
four-way handshake is given as: 


BO + DIFS + 4PLCP + RIS + чт + Б + А + 3SIFS us 


where: 


Figure 21.15(a) Hidden and exposed node problem. 
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BO = backoff time (us) 
DIFS = distributed inter-frame space (50 us) 
PLCP = time required to transmit physical layer convergence protocol (us) 
RTS = request to send frame size (bits) 
CTS = clear to send frame size (bits) 
D = frame size (bits) 
A = acknowledgement frame size (bits) 
R = channel bit rate (bits per second) 
SIFS = short inter-frame space (10 ps) 


We refer to Figure 21.15b and assume that node B and C intend to transmit 
data only without receiving data. When node C is transmitting data to node D, 
node B is aware of the transmission. This is because node B is within the radio 
coverage of node C. Without exchanging RTS and CTS frames, node B will not 
initiate data transmission to node A because it will detect a busy medium. The 
transmission between node A and node B, therefore, is blocked even if both of 
them are idle. This is referred as the exposed node problem. To alleviate this prob- 
lem, a node must wait a random backoff time between the two consecutive new 
packet transmission times. 


21.5.5 IEEE 802.11 MAC Sublayer 

In IEEE 802.11, the MAC sublayer is responsible for asynchronous data service 
(e.g., exchange of MAC service data units (MSDUS)), security service (confidenti- 
ality, authentication, access control in conjunction with layer management), and 
MSDU ordering. 


CTS : Clear to Send 
RTS : Request to Send 


Figure 21.15(b) Hidden and exposed node problem. 
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The MAC sublayer accepts MSDUs from higher layers in the protocol stack 
to send them to the equivalent layer of the protocol stack in another station. The 
MAC adds information to the MSDU in the form of headers and trailers to gener- 
ate a MAC protocol data unit (MPDU). The MPDU is then passed to the physical 
layer to be sent over the wireless medium to other stations. The MAC may frag- 
ment MSDUs into several frames to increase the probability of each individual 
frame being delivered successfully. The MAC frame contains addressing informa- 
tion, information to set the network allocation vector (NAV), and a frame check 
sequence to verify the integrity of the frame. The general IEEE 802.11 MAC 
frame format is shown in Figure 21.16. 

The MAC frame format contains four address fields. Any particular frame 
type may contain one, two, three, or four address fields. The address format in 
IEEE 802.11-1997 is a 48-bit address, used to identify the source and destination 
of MAC addresses contained in a frame, as IEEE 802.3. In addition to source 
address (SA) and destination address (DA), three additional address types are 
defined: the transmitter address, the receiver address (RA), and the basic service 
set identifier (BSSID). The BSSID is a unique identifier for a particular basic ser- 
vice set of the IEEE 802.11 WLAN. In an infrastructure basic service set, the 
BSSID is the MAC address of the AP. 

The transmitter address is the address of the MAC that transmitted the 
frame onto the wireless medium. This address is always an individual address. 
The transmitter address is used by stations receiving a frame to identify the station 
to which any responses in the MAC frame exchange protocol will be sent. 

The receiver address (RA) is the address of the MAC to which the frame is 
sent over the wireless medium. This address may be either an individual or group 
address. 

The source address (SA) is the address of the MAC that originated the frame. 
This address is always an individual address.This address does not always match 
the address in the transmitter address field because of the indirection that is per- 
formed by the distribution system of an IEEE 802.1 WLAN. It is the SA field that 
should be used to identify the source of a frame when indicating that a frame has 
been received to higher layer protocols. 

The destination address (DA) is the address of the final destination to which 
the frame is sent. This address may be either an individual or group address. 
This address does not always match the address in the RA field because of the 
indirection that is performed by the DS. 


MAC Header 


Frame |Duration/ | Address | Address | Address |Sequence| Address Frame FCS 
Control ID 1 2 3 Control 4 Body 


Figure 21.16 IEEE 802.11 MAC frame format. 
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The sequence control field is a 16-bit field that consists of two subfields. 
The subfields are a 4-bit fragment number and a 12-bit sequence number. This 
field is used to allow a receiving station to eliminate duplicate received frames. 
The sequence number subfield contains numbers assigned sequentially by the 
sending station to each MSDU. This sequence number is incremented after each 
assignment and wraps back to zero when incremented from 4095. The sequence 
number for a particular MSDU is transmitted in every data frame associated with 
the MSDU. It is constant over all transmissions and retransmissions of the MSDU. 
If the MSDU is frangmented, the sequence number of the MSDU is sent with 
each frame containing a fragment of the MSDU. The fragment number subfield 
contains a 4-bit number assigned to each fragment of an MSDU. The first, or 
only, fragment of an MSDU is assigned a fragment number of zero. Each succes- 
sive fragment is assigned a sequentially incremented fragment number. The frag- 
ment number is constant in all transmissions or retransmissions of a particular 
fragment. 

The frame body field contains the information specific to the particu- 
lar data or management frames. This field is variable in length. It may be as 
long as 2034 bytes without encryption, or 2312 bytes when the frame body is 
encrypted. The value of 2304 bytes as the maximum length of this field was cho- 
sen to allow an application to send 2048-byte pieces of information, which can be 
encapsulated by as many as 256 bytes of upper layer protocol headers and 
trailers. 

The frame check sequence (FCS) field is 32. bits in length. It contains the 
result of applying the C-32 polynomial to the MAC header and frame body. 

The original 802.11 standard suffers from some serious limitations which 
prevent it from becoming a leading technology and a serious alternative to wired 
LAN. The following are some of the problems: 


* Low data rate: The 802.11 protocol imposes very high overhead to all packets 
that reduce real data rate significantly 
* No QoS guarantees 
Several extensions to the basic 802.11 standard have been introduced by 
IEEE to provide higher data rates or QoS guarantees. 802.11a, 802.11b, and 
802.11g focus on higher data rates whereas 802.11e is aimed at providing QoS 
guarantees. 


21.6 Joining an Existing Basic Service Set 

The 802.11 MAC sublayer is responsible for how a station associates with an AP. 
When an 802.11 station enters the range of one or more APs, it chooses an AP to 
associate with (also known as joining a basic service set), based on signal strength 
and observed packet error rates. Once accepted by the AP, the station tunes to the 
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radio channel to which the AP is set. Periodically it surveys all 802.11 channels in 
order to access whether a different AP would provide it with better performance 
characteristics. If it determines that this is the case, it reassociates with the new 
AP, tuning to the radio channel to which that AP is set. Reassociating usually 
occurs because the wireless station has physically moved away from the original 
AP, causing the signal to be weakened. In other cases, reassociating occurs due to 
changes in radio characteristics in the building, or due to high network traffic on 
the original AP. In the latter case this function is known as load balancing, since 
its primary function is to distribute the total WLAN load most efficiently across 
the available wireless infrastructure. 

The process of dynamically associating and reassociating with APs allows 
network managers to set up WLANs with very broad coverage by creating a series 
of overlapping 802.11b cells throughout a building or across a campus. To be 
successful, the IT manager ideally will employ channel reuse, taking care to set up 
each access point on an 802.11 DSSS channel that does not overlap with a chan- 
nel used by a neighboring AP (see Figure 21.17). 

As noted above, while there are 14 partially overlapping channels specified 
in 802.11 DSSS, there are only 3 channels that do not overlap at all and these are 
the best to use for multicell coverage (refer to Table 21.5). If two APs are in range 
of one another and are set to the same or partially overlapping channels, they 
may cause some interference for one another, thus lowering the total available 
bandwidth in the area of overlap. 


MN, 


Figure 21.17 DSSS channel without overlap with a channel used by neighbor AP. 
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When a station wishes to access an existing basic service set, it needs to get 
synchronization information from the AP. The station can get this information in 
one of two ways: 


* Passive scanning: In this case the station waits to receive a beacon frame 
from the AP. The beacon frame is a frame sent out periodically by the AP 
containing synchronization information. 


* Active scanning: In this case the station tries to locate an AP by transmitting 
probe request frame, and waits for probe response from the AP. 


A method is chosen according to the power consumption/performance trade- 
off. Once the station has located an AP, and decides to join its basic service set, it 
goes through the authentication process. This is the interchange of information 
between the AP and the station, where each side proves the knowledge of a given 
password. This is necessary because WLANs have limited physical security to pre- 
vent unauthorized access. The goal of authentication is to provide access control 
equal to a wired LAN. The authentication service provides a mechanism for one 
station to identify another station. Without this proof of identity, the station is 
not allowed to use the WLAN for data delivery. All 802.11 stations, whether they 
are part of an independent basic service set or extended service set (ESS) network, 
must use the authentication process prior to communicating with another station. 
IEEE 802.11 uses authentication services defined in IEEE 802.111. 

Once the station is authenticated, it then starts the association process. It 
is used to make a logical connection between a mobile station and an AP and to 
exchange information about the station and basic service set/capabilities, which 
allows the distribution system service (DSS) to know about the current position of 
the station. This is necessary so that the AP can know where and how to deliver 
data to the mobile station. A station is allowed to transmit data frames through 
the AP only after the association process is completed. 

When a station determines that the existing signal is poor, it begins scanning 
for another AP. This can be done by passively listening or actively probing each 
channel and waiting for a response. Once information has been received, the 
station selects the most appropriate signal and sends an association request to 
the new AP. If the new AP sends an association response, the client connects to the 
new AP. This feature is known as roaming and is similar to the cellular handover, 
with two main differences: 


* On a packet-based LAN system, the transition from cell to cell may be per- 
formed between packet transmissions as opposed to a cellular system where 
the transition may occur during a phone conversation. This makes WLAN 
roaming a little easier. 

e Onavoicesystem, a temporary disconnection may not affect the conversation, 


while in a packet-based data system it significantly reduces performance 
because retransmission is performed by the upper layer protocols. 
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The 802.11 standard does not define how roaming should be performed, 
but defines the basic tools including active/passive scanning, and a re-association 
process, in which a station roaming from one AP to another becomes associated 
with the new AP. 

The 802.11 standard also provides a mechanism to remove a station from the 
basic service set. The process is called de-authentication. De-authentication is used 
to prevent a previously authenticated station from using the network any further. 
Once a station is de-authenticated, it is no longer able to access the WLAN without 
performing the authentication process again. De-authentication is a notification and 
cannot be refused. When a station wishes to be removed from a basic service set, it 
can send a de-authentication management frame to the associated AP. An AP could 
also de-authenticate a station by sending a de-authentication frame to the station. 


21.7 Security of IEEE 802.11 Systems 

The IEEE 802.11 provides for MAC access control and encryption mechanisms. 
Earlier, the wireline equivalent privacy (WEP) algorithm was used to encrypt mes- 
sages. WEP uses a Rivest Cipher 4 (RC4) pseudo-random number generator with 
two key structures of 40 and 128 bits. Because of the inherent weaknesses of 
the WEP, the IEEE 802.111 committee developed, a new encryption algorithm 
(see Chapter 13) and worked on the enhanced security and authentication mecha- 
nisms for 802.11 systems. 

For access control, ESSID (also known as a WLAN service area ID) is pro- 
grammed into each AP and is required knowledge in order for a wireless client to 
associate with an AP. In addition, there is provision for a table of MAC addresses 
called an access control list to be included in the AP, restricting access to stations 
whose MAC addresses are not on the list. 

Beyond layer 2, 802.11 WLANs support the same security standards 
supported by other 802 LANs for access control (such as network operating 
system logins) and encryption (such as IPSec or application-level encryption). 
These higher-level technologies can be used to create end-to-end secure networks 
encompassing both wired LAN and WLAN components, with the wireless piece 
of the network gaining additional security from the IEEE 802.111 feature set. 


21.8 Power Management 
Power management is necessary to minimize power requirements for battery 
powered portable mobile units. The standard supports two power-utilization 
modes, called continuous aware mode and power save polling mode. In the 
former, the radio is always on and draws power, whereas in the latter, the radio is 
dozing with the AP and is queuing any data for it. 

A power saver mode or sleep mode is defined when the station is not 
transmitting in order to save battery power. However, critical data transmissions 
cannot be missed. Therefore APs are required to have buffers to queue messages. 
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Sleeping stations are required to periodically wake up and retrieve messages from 
the AP. Power management is more difficult for peer-to-peer IBSS configurations 
without central AP. In this case, all stations in the IBSS must be awakened when 
the periodic beacon is sent. Stations randomly handle the task of sending out 
the beacon. Àn announcement traffic information message window commences. 
During this period, any station can go to sleep if there is no announced activity 
for it during this short period. 


21.9 IEEE 802.11b —High Rate DSSS 

In September 1999 IEEE ratified the 802.11b high rate amendment to the 
standard, which added two higher speeds (5.5 and 11 Mbps) to 802.11. The key 
contribution of the 802.11b addition to the WLAN standard was to standardize 
the physical layer support to two new speeds, 5.5 and 11 Mbps. To accomplish 
this, DSSS was selected as the sole physical layer technique for the standard, since 
frequency hopping cannot support the higher speeds without violating current 
FCC regulations. The implication is that the 802.11b system will interoperate 
with 1 Mbps and 2Mbps 802.11 DSSS systems, but will not work with 1 Mbps 
and 2 Mbps FHSS systems. 

The original version of the 802.11 specifies in the DSSS standard an 11-bit 
chipping, called a Barker sequence, to encode all data sent over the air. Each 
11-chip sequence represents a single data bit (1 or 0), and is converted to a 
waveform, called a symbol, that can be sent over the air. These symbols are trans- 
mitted at a 1 million symbols per second (Msps) rate using binary phase shift key- 
ing (BPSK). In the case of 2 Mbps, a more sophisticated implementation based on 
quadrature phase shift keying (QPSK) is used. This doubles the data rate available 
in BPSK, via improved efficiency in the use of the radio bandwidth. 

To increase the data rate in 802.11b standard, advanced coding techniques 
are employed. Rather than the two 11-bit Barker sequences, 802.11b specifies 
complementary code keying (CCK). CCK allows for multichannel operation in 
the 2.4 GHz band by using existing 1 and 2 Mbps DSSS channelization schemes. 
CCK consists of a set of sixty-four 8-bit code words. As a set, these code words 
have unique mathematical properties that allow them to be correctly distinguished 
from one another by a receiver even in the presence of substantial noise and mul- 
tipath interference. The 5.5 Mbps rate uses CCK to encode 4 bits per carrier, 
while the 11 Mbps rate encodes 8 bits per carrier. Both speeds use QPSK modula- 
tion and a signal at 1.375 Msps. This is how the higher data rates are obtained. 
Table 21.11 lists the specifications. 

To support very noisy environments as well as extended ranges, 802.11b 
WLANs use dynamic rate shifting, allowing data rates to be automatically adjusted 
to compensate for the changing nature of the radio channel. Ideally, users connect 
at a full 11 Mbps rate. However, when devices move beyond the optimal range for 
11Mbps operation, or if substantial interference is present, 802.11b devices will 
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Table 21.11 802.11b data rate specification. 


Modulation 
Data rate Code length 6-1 Symbol rate Bits/symbol 
1 Mbps 11 (Barker Sequence) BPSK 1 Msps 1 
2 Mbps 11 (Barker Sequence) QPSK 1Msps 2 
5.5 Mbps 8 (CCK) QPSK 1.375 Msps 4 
11 Mbps 8 (CCK) QPSK 1.375 Msps 8 


transmit at lower speeds, falling back to 5.5, 2, and 1 Mbps. Likewise, if a device 
moves back within the range of a higher-speed transmission, the connection will 
automatically speed up again. Rate shifting is a physical layer mechanism trans- 
parent to the user and upper layers of the protocol stack. 


21.10 IEEE 802.11n 


In response to growing market demand for higher-performance WLANSs, the 
IEFE formed the task group 802.11n. The scope of this task group is to define 
modifications to the physical and MAC layer to deliver a minimum of 100 Mbps 
throughput at the MAC service access point (SAP). 

802.11n employs an evolutionary philosophy reusing existing technologies 
where practical, while introducing new technologies where they provide effective 
performance improvements to meet the needs of evolving applications. Reuse of 
legacy technologies such as OFDM, forward error correction coding, interleaving, 
and quadrature amplitude modulation mapping have been maintained to keep 
costs down and ease backward compatibility. 

There are three key areas that need to be considered when addressing 
increases in WLAN performance. First, improvements in radio technology are 
needed to increase the physical transfer rate. Second, new mechanisms imple- 
menting the effective management of enhanced physical layer performance modes 
must be developed. Third, improvements in data transfer efficiency are needed to 
reduce the improvements achieved with an increase in physical transfer rate. 

The emerging 802.11n specification differs from its predecessors in that it 
provides for a variety of optional modes and configurations that dictate different 
maximum raw data rates. This enables the standard to provide baseline performance 
parameters for all 802.11n devices, while allowing manufacturers to enhance or tune 
capabilities to accommodate different applications and price points. WLAN hard- 
ware does not need to support every option to be compliant with the standard. 

The first requirement is to support an OFDM implementation that improves 
upon the one employed in 802.11a/g standards, using a higher maximum code 
rate and slightly wider bandwidth. This change improves the highest attainable 
raw data rate to 65 Mbps from 54 Mbps in the existing standards. 
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Multi-input multi-output (MIMO) technology (see Chapter 23) is used in 
802.11n to evolve the existing OFDM physical interface presently implemented 
with legacy 802.11a/g. MIMO harnesses multipath with a technique known as 
space division multiplexing (SDM). The transmitting WLAN device splits a data 
stream into multiple parts, called spatial streams, and transmits each spatial stream 
through separate antennas to corresponding antennas on the receiving end. The 
current 802.11n provides for up to four spatial streams, even though compliant 
hardware is not required to support that many. 

Doubling the number of spatial streams from one to two effectively doubles 
the raw data rate. There are trade-offs, however, such as increased power 
consumption and, to a lesser extent, cost. The 802.11n specification includes an 
MIMO power-save mode, which mitigates power consumption by using mul- 
tiple paths only when communication would benefit from the additional per- 
formance. The MIMO power-save mode is a required feature in the 802.11n 
specification. 

There are two features in the specification that focus on improving MIMO 
performance: (1) beam-forming and (2) diversity. Beam-forming is a technique 
that focuses radio signals directly on the target antenna, thereby improving range 
and performance by limiting interference. Diversity exploits multiple antennas by 
combining the outputs of or selecting the best subset of a larger number of anten- 
nas than required to receive a number of spatial streams. The 802.11n specifica- 
tion supports up to four antennas. 

Another optional mode in the 802.11n effectively doubles data rates by 
doubling the width of a WLAN communications channel from 20 to 40 MHz. 
The primary trade-off is fewer channels available for other devices. In the case of 
the 2.4-GHz band, there is enough room for three nonoverlapping 20-MHz chan- 
nels. A 40-MHz channel does not leave much room for other devices to join the 
network or transmit in the same air space. This means intelligent, dynamic man- 
agement is critical to ensuring that the 40-MHz channel option improves overall 
WLAN performance by balancing the high-bandwidth demands of some clients 
with the needs of other clients to remain connected to the network. 

One of the most important features in the 802.11n specification to improve 
mixed-mode performance is aggregation. Rather than sending a single data 
frame, the transmitting client bundles several frames together. Thus, aggregation 
improves efficiency by restoring the percentage of time that data is being transmit- 
ted over the network. 

The 802.11n specification was developed with previous standards in mind 
to ensure compatibility with more than 200 million Wi-Fi (802.11b) devices cur- 
rently in use. An 802.11n access point will communicate with 802.11a devices on 
the 5-GHz band as well as 802.11b and 802.11g hardware on 2.4-GHz frequen- 
cies. In addition to basic interoperability between devices, 802.11n provides for 
greater network efficiency in mixed mode over what 802.11g offers. 


21.10 IEEE 802.11n 751 


Table 21.12 lists the major components of 802.11n. Table 21.13 compares 
the primary IEEE 802.11 specifications. 


Table 21.12 Major components of IEEE 802.11n. 


Feature 


Status 


Definition 


Better OFDM 


Supports wider bandwidth and higher code 


Space-Division 


Multiplexing (SDM) 


rate to bring maximum data rate to 65 Mbps 


Improve performance by parsing data into 
multiple streams transmitted through mul- 
tiple antennas 


Mandatory 


Optional for up to four 


antennas 


Diversity Exploits the existence of multiple antennas Optional for up to four 
to improve range and reliability. Typically antennas 
employed when the number of antennas on 
the receiving end is higher than the number 
of streams being transmitted. 

MIMO Power Save Limits power consumption penalty of Required 
MIMO by utilizing multiple antennas only 
on as-needed basis. 

40MHz Channels Effectively doubles data rates by doubling Optional 
channel width from 20 MHz to 40MHz 

Aggregation Improves efficiency by allowing transmis- Required 
sion bursts of multiple data packets between 
overhead communication 

Reduced Inter-frame Designed to improve efficiency by providing Required 

Spacing (RIFS) a shorter delay between OFDM transmis- 
sions than in 802.11a or g. 

Greenfield Mode Improves efficiency by eliminating support for Optional 
802.11a/b/g devices in an all 802.11n network 

Table 21.13 Primary IEEE 802.11 specifications and their comparisons. 
802.11a 802.11b 802.11g 802.11n 

Approval date July 1999 July 1999 June 2003 August 2006 

Maximum data 54Mbps 11Mbps 54Mbps 600 Mbps 

rate 

Modulation OFDM DSSS or CCK DSSS or CCK DSSS or CCK 

or OFDM or OFDM 

RF band 5 GHz 2.4 GHz 2.4GHz 2.4 GHz or 5 GHz 

Number of spa- 1 1 1 1, 2,3, or 4 

tial streams 

Channel width 20 MHz 20 MHz 20 MHz 20 MHz or 


40 MHz 
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Because it promises far greater bandwidth, better range, and reliability, 
802.11n is advantageous in a variety of network configurations. And as emerging 
networking applications take hold in the home, a growing number of consumers 
will view 802.11n not just as an enhancement to their existing network, but as a 
necessity. Some of the current and emerging applications that are driving the need 
for 802.11n are voice over IP (VoIP), streaming video and music, gaming, and 
network attached storage. 


21.11 Other WLAN Standards 


The high performance radio local area network (HIPERLAN) committee in 
ETSI, referred to as Radio and Equipment Systems (RES) 10, worked with the 
European Conference of Postal and Telecommunications Administration (CEPT, 
a committee of PTT and other administration representatives) to identify its 
target spectrum. The CEPT identified the 5.15—5.25 GHz band (this allocation 
allows three channels), with an optional expansion to 5.30 GHz (extension to 
five channels). Any country in the CEPT area (which covers all of Europe, as 
well as other countries that implement CEPT recommendations) may decide 
to implement this recommendation. Most of the CEPT countries permit HIP- 
ERLAN systems to use this 5 GHz band. In the United States, the U.S. Federal 
Communications Commission (FCC) followed the European model roughly. The 
unlicensed National Information Infrastructure band (U-NII) covers approxi- 
mately 300 MHz in three different bands between 5.1 and 5.8 GHz. The regula- 
tors in Japan are likely to align with the 5 GHz band also. In addition, a second 
band from 17.1 to 17.3 GHz was identified by CEPT but so far no systems have 
been defined to use this band. 


21.11.1 HIPERLAN Family of Standards 

HIPERLAN/1 is aligned with the IEEE 802 family of standards and is very much 
like a modern wireless Ethernet. HIPERLAN/1, a standard completed and ratified 
in 1996, defines the operation of the lower portion of the OSI reference model, 
namely the data link layer and physical layer [9,10]. The data link layer is further 
divided into two parts, the channel access control (CAC) sublayer and media 
access control (MAC) sublayer. The CAC sublayer defines how a given channel 
access attempt will be made depending on whether the channel is busy or idle 
and at what priority level an attempt will be made. The HIPERLAN MAC layer 
defines the various protocols which provide the HIPERLAN/1 features of power 
conservation, security, and multihop routing (i.e., support for forwarding), as well 
as the data transfer service to the upper layers of protocols. HIPERLAN/1 uses 
the same modulation technology that is used in GSM, Gaussian minimum shift 
keying (GMSK). It has an over air data rate of 23.5 Mbps and maximum user data 
rate (per channel) of over 18 Mbps. The range in a typical indoor environment 
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is 35 to 50 meters. HIPERLAN/1 provides quality of service (QoS), which lets 
critical traffic be prioritized. 

HIPERLAN/2 has many characteristics of IEEE 802.11 WLAN. HIPER- 
LAN/2 has three basic layers: physical layer (PHY), data link control layer (DLC), 
and convergence layer (CL) (see Figure 21.18). The protocol stack is divided into a 
control plane and a user plane. The user plane includes functions for transmission 
of traffic over established connections, and the control plane performs functions 
of connection establishment, release, and supervision. The transmission format 
on the physical layer is a burst consisting of a preamble part and a data part. The 
data part originates from each of the transport layers within DLC. A key feature 
of the physical layer is to provide several modulation and coding schemes accord- 
ing to current radio link quality and meet the requirements for different physical 
layer modes as defined by transport channels within DLC. Table 21.14 provides a 
comparison of the IEEE 802.11 WLAN with HIPERLAN/2. 

The faster HIPERLANS include the high performance radio access (HIPER- 
ACCESS) and high performance metropolitan area network (HIPERMAN). Both 
HIPERACCESS and HIPERMAN are designed for broadband speeds and greater 
ranges than HIPERLAN/2. HIPERACCESS provides up to 100 Mbps in the 40.5- 
43.5 GHz band whereas HIPERMAN is designed for a WMAN in 2 GHz and 
11 GHz bands. 

The DLC layer constitutes the logical link between an access point (AP) 
and mobile terminals (MTs). The DLC includes functions for medium access and 
transmission as well as terminal/user connection handling. The DLC layer consists 
of medium access control (MAC), error control (EC), radio link control (RLC), 
DLC connection control (DCC), radio resource control (RRC) and association 
control function (ACF) (see Figure 21.19). Compared to IEEE 802.11 WLAN, 
medium access in HIPERLAN/2 is based on the time division duplex/time division 


Higher Layers 


Convergence Layer 


Connection based Connectionless 


Data Link Control (DLC) Layer 


Communication Management 


MAC 


Physical Layer 


Figure 21.18 Protocol stack of HIPERLAN/2. 
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Table 21.14 A comparison of HIPERLAN/2 and IEEE 802.11. 


Characteristic IEEE 802.11 HIPERLAN/2 
Spectrum 2.4GHz 5GHz 

Max. physical rate 2Mbps 54Mbps 

Max. data rate, layer 3 1.2 Mbps 32 Mbps 

Medium access control/ CSMA/CA Central resource control, TDMA/TDD 
Media sharing 

Access scheme DCF/PCF Elimination yield-non preemptive 


Connectivity 
Multicast 


QoS support 


Frequency selection 


Connectionless 
Yes 
PCF 


Frequency hopping 
or DSSS 


priority multiple access 
Connection oriented 
Yes 


ATM/802.1p/Rsource reSerVation Proto- 
col/Differential service (full control) 


Single carrier with dynamic frequency 
selection 


Authentication No Network access identifier/IEEE address/ 
X.509 

Encryption 40-bit RC4 Data Encryption Standard (DES), 
triple DES 

Handover support No No 

Fixed network support Ethernet Ethernet, IP, ATM, UMTS, Firewire, PPP 

Management 802.11 MIB HIPERLAN/2 MIB 

Radio link quality control No Link adaptation 


multiple access (TDD/TDMA) and uses a MAC frame of 2ms duration. An AP 
provides centralized control and informs the mobile terminals at which point in 
time in the MAC frame they are allowed to transmit their data. Time slots are 
allocated dynamically depending on the need for transmission resources. 
HIPERLAN/2 operates as a connection-oriented wireless link. It supports 
different QoS levels required for the transmission of various traffic types. The 
convergence layer (CL) between the data link layer and network layer provides 
QoS. The role of the convergence layer is two-fold—it maps the service require- 
ments of the higher layer to the service offered by the data link control layer, 
and converts packets received from the core network to the format expected at 
the lower layers. There are two types of convergence layer. One is cell based and 
the other is packet based. We focus only on the packet based convergence layer, 
which can be further divided into a common part and a service specific part. The 
packet based service specific convergence sublayer (SSCS) is for switched Ethernet 
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Figure 21.19 Relation between logical and transport channels in HIPERLAN/2. 


and IEEE 1394 Firewire. Broadband radio access for IP-based networks (BRAIN) 
focuses on the specifications of an innovative SSCS dedicated to provide support 
to IP traffic in a mobile environment. The architecture of the convergence layer 
makes HIPERLAN/2 suitable as a radio access for different types of fixed net- 
works, e.g., Ethernet, IP, ATM, UMTS, etc. The main function of the common 
part is to segment packets received from the SSCS, and reassemble segmented 
packets received from the data link control layer before they are handed over to 
the SSCS. The Ethernet SSCS makes the HIPERLAN/2 network look like a wire- 
less segment of a switched Ethernet. 

HIPERLAN/2 supports two QoS schemes: the best effort scheme and IEEE 
802.1p-based priority scheme. The connection-oriented nature of HIPERLAN/2 
allows implementation of QoS. Each connection is assigned a specific QoS in 
terms of bandwidth, delay, jitter, bit error rate, and so on. Also a simple approach 
is used where each connection is assigned a priority level relative to other connec- 
tions. The QoS support with high data rate facilitates the transmission of many 
different types of data streams, e.g., video, voice, and data. 


QoS in HIPERLAN/2 

Quality of service deals with the ability of a network to provide service for specific 
network traffic over various underlying wireline or wireless technologies. Com- 
pared to end-to-end IP network QoS, wireless network may provide QoS only 
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for one or two hops of an end-to-end connection. The cellular radio access in the 
BRAIN uses HIPERLAN/2 and supports QoS on a per connection basis. 

An IP convergence layer is used to provide the functions required for map- 
ping the QoS requirements of the individual connection to the QoS parameters 
available in DLC connections. The convergence layer offers a QoS interface to 
support different IP QoS schemes. By using IP QoS parameters, the convergence 
layer establishes DLC connections in which IP QoS parameters are mapped into 
DLC connections for priority, radio bandwidth reservation, appropriate ARQ 
scheme, and handover strategy. This procedure is realized by mapping IP packets 
into different DLC connection queues based on respective code point and desti- 
nation address fields. The convergence layer associates a specific link scheduling 
priority, discarding time and/or bandwidth reservation to each DLC queue. The 
convergence layer segments IP traffic to fixed length packets. The segmentation 
and reassembly causes extra complexity in the convergence layer but enables a 
better bandwidth reservation policy. 

MAC enables full rescheduling in every 2ms and dynamically adjusts uplink 
and downlink capacity. Radio link control (RLC) provides connection-oriented 
secured link service to the convergence layer. There are up to 63 unicast data 
connections per terminal that can be supported with various QoS parameters. 
Error correction (EC) provides a selective repeat ARQ mode for each connection. 
Alternatively, for delay intolerant and multicast services a repetition mode can be 
used. Thus, DLC provides means for executing several IP QoS techniques such as 
prioritizing, on-demand-based bandwidth reservation, and delay guarantee. DLC 
also provides dynamic frequency selection (DFS), link adaptation, power control, 
and power saving. 

The physical layer uses orthogonal frequency division multiplexing (OFDM) 
to combat frequency selective fading and randomize the burst errors caused by a 
wide band fading channel. There are seven modes with different coding and mod- 
ulation schemes available in physical layer; all of them can be adapted dynami- 
cally by a link adaptation scheme. There is a strong interaction between the PHY 
modes, retransmission load and utilization of the radio link, delay, and overall 
throughput. 

The OFDM transmits broadband, high data rate information by dividing the 
data into several interleaved, parallel bit streams, and lets each one of them modu- 
late on a separate subcarrier. Various coding and modulation schemes are used 
by a link adaptation mechanism. This is to adapt to current radio link quality 
and meet the requirements for different physical layer properties as defined by 
the transport channels within DLC. Table 21.15 provides the different PHY 
modes and their transmission rates. The seven PHY modes use BPSK, QPSK, 
and 16-QAM as mandatory subcarrier modulation schemes whereas 64-QAM 
is optional. Forward error correction is performed by a convolutional code of a 
rate of 1/2 and a constraint length of 7. Other code rates of 3/4 and 9/16 can be 
obtained by puncturing. 
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Table 21.15 Physical modes and transmission rates of HIPERLAN/2. 


Nominal Coded bit Coded bits Data bit 
Coding bit rate rate per per OFDM per OFDM 
Mode Modulation rate R (Mbps) subcarrier symbol symbol 
1 BPSK 15 6 1 48 24 
2 BPSK 3/4 9 1 48 36 
3 OPSK ГА 12 2 96 48 
4 ОРЅК 3/4 18 2 96 72 
5 16-OAM 9/16 27 4 192 108 
(HIPERLAN/2 
only) 
6 16-OAM (IEEE 1/2 24 4 192 96 
only) 
7 16-QAM 3/4 36 4 192 144 
8 64-QAM 3/4 54 6 288 216 


The DLC scheduling algorithm deals with the properties of the HIPERLAN/2 
radio access that are dependent on ARQ and link adaptation. ARQ reacts on trans- 
mission errors and initiates retransmission. When the error check bit detects error(s) 
in the transmission, ARQ sends a request for retransmission of the error packet 
data unit (PDU). Thus, for a poor radio link, retransmission will cause large trans- 
mission delay. Selective repeat ARQ uses a transmission window at the transmitter 
and receiver. The receiver notifies the transmitter of the sequence number below 
which all PDUs are received correctly and points out which PDU is not correct. 

Based on the current radio link conditions, the link adaptation in the DLC 
layer assigns a specific PHY mode to the PDU dedicated to a connection. Each con- 
nection and its direction are addressed individually and the assignment varies from 
one MAC frame to another. The link adaptation scheme adapts the PHY mode 
based on link quality measurements. ARQ and link adaptation reduce packet loss 
rate but introduce additional overhead and delay to the radio access system. 

Total system throughput, transmission delay, and bit error rate are the 
important parameters in determining the performance of the HIPERLAN/2 radio 
access. There is a strong interaction between PHY modes and these parameters. 

The MAC protocol functions are used for organizing the access and 
transmission of data on the radio link. Since HIPERLAN/2 uses a central resource 
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controlled TDD/TDMA scheme, MAC frame (MF) is allowed to simultaneously 
communicate via a number of DLC connections in both downlink and uplink 
directions. Each MF allocates time slots for broadcast channel (BCH), frame 
channel, access feedback channel (ACH), random channel (RCH), downlink (DL) 
phase, uplink (UL) phase and directlink (DiL) phase. Data is grouped as PDU 
trains. There are two kinds of PDU, one is long PDU (LCH PDU) of 54 bytes and 
another is short PDU (SCH PDU) of 9 bytes. The PDU error ratio refers to the 
error rate of LCH PDU. 


21.11.2 Multimedia Access Communication —High Speed Wireless 
Access Network 

Multimedia access communication (ММАС) — high speed wireless access network 
(HiSWAN)— started in Japan in 1996. It uses two frequency bands: 5 GHz for 
HiSWANa and 25 GHz for HiSWANb. The HiSWAN uses the 5 GHz license-free 
frequency band and is closely aligned with the HIPERLAN/2. HiSWAN uses the 
OFDM physical layer to provide a standard speed of 27 Mbps and 6 to 36 Mbps 
by link adaptation. However, MMAC-HiSWANa differs from the HIPERLAN/2 
in radio network functions due to the differences in regional frequency planning 
and regulations. Instead of dynamic frequency selection in HIPERLAN/, carrier 
sense functions of access points are mandatory in MMAC-HiSWANa. Also, inter- 
access point synchronizations are specified to avoid interference among access 
points and to use four available channels in Japan for wide coverage. Table 21.16 
summaries various WLANs. 


Example 21.5 

Consider the HIPERLAN/2 that uses BPSK and R = 3/4 codes for 9 Mbps informa- 
tion transmission and 16-QAM with the same coding for the actual payload data 
transmission rate of 36 Mbps. Calculate the coded symbol transmission rate per 
subcarrier for each of the two modes. What is the bit transmission rate per subcar- 
rier for each of the two modes? 


Solution 


* User data transmission rate per carrier with R = ?/4 convolution encoder 


(refer to Table 21.11). 


Mode I (9 Mbps) = 2 xum = 187.5 kbps 


Mode II (36 Mbps) = 3610" = 750 kbps 


* Carrier transmission rate with R = ?/4 convolutional encoder 
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Mode II = 2 = 1000 kbps 
(3/4) 


* Carrier symbol rate 


Mode I (BPSK) = 250ksps 


Mode II (16-QAM) = 1009 = 250 ksps 


Ехатріе 21.6 


What is the user data rate for HIPERLAN/2 with 64-QAM modulation with К = 3/4 
covolutional coder? 


Solution 
Carrier symbol rate = 250ksps; bits per symbol for 64-QAM = 6 


User data rate = 250 X i X 6 X 48 = 54Mbps 


21.12 Performance of a Bluetooth Piconet in the Presence 
of IEEE 802.11 WLANs 

Due to its global availability, the 2.4GHz ISM unlicensed band is a popular 

frequency band to low-cost radios. Bluetooth and the IEEE 802.11 WLAN both 

operate in this band. Therefore, it is anticipated that some interference will result 

from both these systems operating in the same environment. Interference may 

lead to significant performance degradation. In this section, we evaluate Bluetooth 


Table 21.16 Comparisons of various WLAN standards. 


IEEE IEEE IEEE IEEE MMAC 
802.11 802.11b 802.11а 802.119 HIPERLAN/1 HIPERLAN/2 HiSWAN 


Rectifica- June 1997 Sept. 1999 Sept. 1999 June 2003 early 1993 Feb. 2000 April 1997 
tion 


RF band- 2.4 2.4 5.0 2.4 5 5 5 
width 

(GHz) 

Max. 2 11 54 54 23.5 54 27 
data rate 

(Mbps) 

Physical FHSS, DSSS OFDM OFDM GMSK OFDM OFDM 
layer (PHY) DSSS, IR 

Range (m) 50-100 50-100 50-100 50-100 50 50 indoor, 100-150 


300 outdoor 
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MAC layer performance in the presence of neighboring Bluetooth piconets and 
neighboring IEEE 802.11 WLANs. 

A packet collision occurs when a desired Bluetooth packet [11,12,17] overlaps 
the interfering packets in time and frequency. In Bluetooth, the duration of a single 
slot packet is 366 ms and the duration of the slot is 625 ms. The time between the 
end of the transmission of the packet and the start of the next slot is the idle time. 
Similarly, the duration of one 802.11 packet traffic time includes packet transmis- 
sion time and a backoff period. 

To simplify the analysis, we make the following assumptions: 


* The link is continuously established and the collocated systems are suf- 
ficiently close to each other such that the Bluetooth packet will be cor- 
rupted completely by the interference packets even if they overlap by a single 
bit. 

* The desired Bluetooth packet won't be destroyed by another piconet if it is 
hit during the idle time. 

* The desired Bluetooth packet won't be destroyed by an IEEE 802.11 net- 
work during the IEEE 802.11 backoff period. 


In Bluetooth, the hopping patterns are 100% uncorrelated. 


* For a long enough observation time, a given transmitter uses the 79 hopping 
channels equally. 

There are also 79 channels spaced 1 MHz apart in the IEEE 802.11 frequency 
hopping (FH) system. 


Each station's signal hops from one modulating frequency to another in a 
predetermined pseudo-random sequence. 


The collision probability of Bluetooth to the IEEE 802.11 FH system is 1/79. 
In the IEEE 802.11 direct sequence (DS), the data stream is converted into a sym- 
bol stream which spreads over a relatively wide band channel of 22 MHz, so the 
interference on a Bluetooth packet from IEEE 802.11 DS system is much higher 
than that from the 802.11 FH system. It is because the bandwidth of a channel 
in DS is 22 times as wide as Bluetooth one channel. The collision probability of 
Bluetooth to the IEEE 802.11 DS system is 22/79. 


21.12.1 Packet Error Rate (PER) from N Neighboring Bluetooth 
Piconets 


* Synchronous mode: The probability that one interfering Bluetooth piconet 
selects the same channel as the desired piconet is 1/79. The probability for 
a Bluetooth packet to be transferred successfully for synchronous mode is 
(1 — 1/79) = 78/79 


e Asynchronous mode: The duration of a single slot packet is 366 us and the 
duration of a slot is 625 ws. If r is equal to 366/625, there is a probability 
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of 2(1 — r) that only the preceding or the following slot is vulnerable and a 
probability of (2r — 1) that both preceding and following slots are vulner- 
able. Hence the probability of the desired piconet not being disturbed by 
one advisory piconet is given as: 


РОК = 2(1 n: (2r 1) - (28) (21.1) 


The PER due to N neighboring Bluetooth piconets for synchronous and 


asynchronous modes are given as: 


(PER) yn = 1 – E (21.2) 


(PER)asyn = 1 [2a n-(2 + (ar 1) «(BPP =1 (PUR)N (21.3) 


21.12.2 PER from M Neighboring IEEE 802.11 WLANs* 
Under IEEE 802.11 FH, the probability of M IEEE 802.11 induced collisions on 
a Bluetooth packet is given as [17]: 


M 
PER = 1 


(21.4) 


79 


Я а) | (28) нл » ІСІ. a [нл] -Gc 


L| \79 L 


Under IEEE 802.11 DS, the probability of M IEEE 802.11 induced collisions 
on a Bluetooth packet is given as: 


PER = 1 |: а) | нл Е S | (32) нл] ссі 


M 


(21.5) 


where: 
H = the duration of a Bluetooth packet 
L = the dwell period of an IEEE 802.11 transmission 
Tw = the packet duration of IEEE 802.11 
С = |Н - T,- Н 
[x] = the least integer greater than or equal to x 


The collision probability of a Bluetooth piconet where there are N neighboring 
Bluetooth piconets and M IEEE 802.11 WLANS will be: 


(PER), = 1 — (2 ; (Pa (21.6) 


* Refer to Reference [17] for the derivation of equations and details. 
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(PER )asyn = 1 —(PYR)N(P.)M (21.7) 


21.12.3 Aggregated Throughput 

The aggregated throughput of successfully transmitted packets in all piconets can 
be expressed as S,(7) = nP;(n,m), where n is the number of Bluetooth piconets, 
т is the number of IEEE 802.11 WLANs, and P,(,m) is the probability that a 
Bluetooth packet is free from other piconets and 802.11 network collisions. The 
aggregate throughput for different cases are given in Table 21.17. 


Example 21.7 

Determine the collision probability of 1000 bytes IEEE 802.11 frequency hop- 
ping (FH) packet at 2 Mbps and Bluetooth. Assume a dwell period of an 802.11 
transmission to be 3 ms. What is the PER with an IEEE 802.11 direct spread (DS) 
packet? Duration of Bluetooth packet = 0.625 ms. 


Solution 
1000 x 8 
= ——— L? = 4 ms 
W —2x106 
[| 2 [9.625] -1 
L 3 


G = 3 — 4 – 0.625 = —1.625 ms 


ІСІ = 1.625 ms 


1.625 | (78 1.625 | /78\l +1 о 
== — — + . = i == о 
(PER)py = 1 [1 : (2) : (4) | 0.0195 = 2% 


— .. 1.625 |. (57 1.625 (572| _ Aj 96 
(PER)ps = 1 (а : | (27) + : (85 0.3873 ~ 38.73% 


Note the collision probability with 802.11 DS is much higher than with 
802.11 FH. 


Table 21.17 Aggregated throughputs for different cases. 


Case n m P,(n,m) S,(n) 

Synchronous N+1 0 (78/79) (М + 1)(78/79)N 
N+1 M (78/79) NP М (М + 1)78/79)NPM 

Asynchronous N+1 0 (P URN (М + 1)(PUR)N 
N+1 M (Pees (М + 1P YRNPM 
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21.13 Interference between Bluetooth and IEEE 802.11 


Interference range is the distance between two devices in order to interfere, if 
they operate at the same frequency and at the same time. The interference range 
depends on propagation characteristics of the environment, processing gains of 
receivers, and transmitted power from different devices. Figure 21.20 shows an 
interference scenario between a transmitting Bluetooth (BT-1) device and a receiv- 
ing IEEE 802.11 FH device (MS) collocated in the same area [15]. Since IEEE 
802.11 AP is usually located on the wall to provide better coverage, it is less likely 
to be interfered with by the BT. Interference occurs when the MS receives infor- 
mation from the AP, and BT-1 transmits information to BT-2; or when the MS 
transmits and BT-1 receives. We assume the interference from the AP to the BT 
devices and the interference of the BT-2 to the IEEE 802.11 device are negligible. 
When the MS is receiving and BT-1 is transmitting, the signal-to-interference ratio 
(SIR) at the MS will be: 


_ S KPad ? _ Pap (gy 
SIR = 5 т (5) (21.8) 
Tmax 7 d[(SIR) min А (Ppr/Pap) |" (21.9) 


where: 

Pap and Рвт = the transmitted power by the AP and Bluetooth devices, respectively 
y = path loss exponent 

d = distance between AP and IEEE 802.11 device 

r = distance between Bluetooth device and IEEE 802.11 device 


Figure 21.20 First interference scenario between Bluetooth and IEEE 802.11 FH device. 
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Tmax = range of interference between Bluetooth and 802.11 device 
(SIR) min = minimum signal-to-interference ratio 


In the second scenario, the MS transmits to the AP and BT-1 receives from 
BT-2 (see Figure 21.21), then 


Tmax — d[(SIR) min(Pms/Ppr)] 1” (21.10) 


where: 
Pms is the transmitted power of the IEEE 802.11 device 


If instead of the IEEE 802.11 FH system, the IEEE 802.11 DS system is used 
in the scenario of Figure 21.20, the minimum required received SIR at the mobile 
terminal is reduced by the processing gain, Gp, of the DSSS. The interference 
range fmax Will be: 


Tmax — d|(SIR)min(Pat/{PapGp})] 1y (21.11) 


Similarly, the interference range for the second scenarios of Figure 21.21 with the 
IEFE 802.11 DSSS system will be: 


Tmax 7 d[(SIR){Pms/(PprGp})] ad (21.12) 


802.11 FH 
Device 
802.11 FH 
AP 


Figure 21.21 Second interference scenario between IEEE 802.11 FH device and 
Bluetooth. 
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Example 21.8 
Consider the Bluetooth and IEEE 802.11 FH interference scenario (refer to Figure 
21.20): 


(a) Assuming that the acceptable error probability for the mobile terminal is 
107°, find (SIR) min that supports this error rate, and (b) using (SIR) min from 
(a) calculate r4, for d = 10 m, y = 4, Рвт = 20dBm and Pap = 40 dBm 


Solution 
P, = 0.5, 0-5Ev/No 
1075 = 0.e79-5Ev/No 


Ee = 21.6 = 13.35dB 


usc 102167: 20" = 18.13m 


Ехатр!е 21.9 


Calculate rmax for the interference scenarios (see Figure 21.21) using Smin from 
Example 21.8 and d = 10m, y = 4, Рвт = 20dBm and Pms = 40dBm 


Solution 


Tmax — 10216 S = 25.6m 


Example 21.10 
Repeat Problems 21.8 and 21.9, if the IEEE 802.11 FH device is replaced by the 
IEEE 802.11 DS device (Gp = 11). 


Solution 


= 21.6 х 20114 _ 
Tmax 10 DAE | 9.95m 


= 21.6 х 20114 _ 
пах = 10] 21820)" = 14.08m 

Note the interference ranges are smaller for the IEEE 802.11 DS device com- 
pared to the IEEE 802.11 FH device. 


21.14 IEEE 802.16 


The IEEE 802.16 standard delivers performance comparable to traditional cable, 
DSL, or T1 offerings. The principal advantages of systems based on 802.16 are 
multifold: faster provisioning of service, even in areas that are hard for wired infra- 
structure to reach; lower installation cost; and ability to overcome the physical 
limitations of the traditional wired infrastructure. 802.16 technology provides a 
flexible, cost-effective, standard-based means of filling gaps in broadband services 
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not envisioned in a wired world. For operators and service providers, systems 
built upon the 802.16 standard represent an easily deployable *third pipe" capa- 
ble of delivering flexible and affordable last-mile broadband access for millions of 
subscribers in homes and businesses throughout the world [18,19]. 

The 802.16a is an extension of the 802.16 originally designed for 10-66 GHz. 
It covers frequency bands between 2 and 11 GHz and enables non line-of-sight 
(NLOS) operation, making it an appropriate technology for last-mile applications 
where obstacles such as trees and buildings often present and where base stations 
may need to be unobtrusively mounted on the roofs of homes or buildings rather 
than towers on mountains. 

The 802.162 has a range of up to 30 miles with a typical cell radius of 4 to 
6 miles. Within the typical cell radius NLOS performance and throughputs are 
optimal. In addition, the 802.16a provides an ideal wireless backhaul technology 
to connect 802.11 WLAN and commercial 802.11 hotspots with the Internet. 
Table 21.18 provides a road map of IEEE 802.16 standards. 

Applications of the 802.16 are cellular backhaul, broadband on-demand, 
residential broadband, and best-connected wireless service (see Figure 21.22). The 
802.16 delivers high throughput at long ranges with a high spectral efficiency. 
Dynamic adaptive modulation allows base stations to trade off throughput for 
range. The 802.16 supports flexible channel bandwidths to accommodate easy 
cell planning in both licensed and unlicensed spectra worldwide. The 802.16 
includes robust security features and QoS needed to support services that require 
low latency, such as voice and video. The 802.16 voice service can either be TDM 
voice or voice over IP (VoIP). Privacy and encryption features are also included to 
support secure transmission and data encryption. 

The worldwide interoperability for microaccess inc. (WiMAX) forum, an 
industry group, focused on creating system profiles and conformance programs 


Table 21.18 Road-map of IEEE 802.16 standard. 


Standard Features 

802.16 (2001) Air interface for fixed broadband wireless access system, 
MAC and PHY specification for 10-66 GHz (LOS) 

802.16a (January 2003) Amendment to 802.16; MAC modifications and additional 


PHY specifications for 2-11 GHz (NLOS); three physical 
layers — OFDM, OFDMA, single carrier; additional MAC 
functions; mesh topology support; ARO 


802.16d (July 2004) Combine 802.16 and 802.16a, some modification to MAC 
and PHY 
802.16e (December 2005) Amendment to 802.16d, MAC modifications for limited 


mobility 
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Figure 21.22 Applications of IEEE 802.16 (WiMax). 


to ensure operability among devices based on the 802.16 standard from different 
manufacturers. For more details see references [18] and [19]. 


21.15 World Interoperability for MicroAccess, Inc. (WiMAX) 


WiMAX is an advanced technology solution based on an open standard, designed 
to meet the need for very high speed wide area Internet access, and to do so in a 
low-cost, flexible way. It aims to provide business and consumer broadband service 
on the scale of the metropolitan area network (MAN). WiMAX networks are 
designed for high-speed data and will spur innovation in services, content, and new 
mobile devices. WiMAX is optimized for IP-based high-speed wireless broadband 
which will provide for a better mobile wireless broadband Internet experience. 

The WiMAX product certification program ensures interoperability between 
WiMAX equipment from vendors worldwide. The certification program also considers 
interoperability with high performance radio metropolitan area network (HIPERMAN), 
the European telecommunication standards institutes MAN standard. 

With its large range and high transmission rate, WiMAX can serve as a 
backbone for 802.11 hotspots for connecting to the Internet. Alternatively, users 
can connect mobile devices such as laptops and handsets directly to WiMAX base 
stations without using 802.11. Mobile devices connected directly can achieve a 
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range of 4 to 6 miles, because mobility makes links vulnerable. The WiMAX 
technology can also provide fast and cheap broadband access to markets that lack 
infrastructure (fiber optics or copper wire), such as rural areas and unwired coun- 
tries. WiMAX can be used in disaster recovery scenes where the wired networks 
have broken down. It can be used as backup links for broken wired links. 

WiMAX can typically support data rates from 500 kbps to 2 Mbps. WiMAX 
also has clearly defined QoS classes for applications with different requirements 
such as VoIP, real-time video streaming, file transfer, and web traffic. A cellular 
architecture similar to that of mobile phone systems can be used with a central 
base station controlling downlink/uplink traffic (see Figure 21.22). 

WiMAX is a family of technologies based on IEEE 802.16 standards. There 
are two main types of WiMAX today, fixed WiMAX (IEEE 802.16d — 2004), and 
mobile WiMAX (IEEE 802.16e— 2005). Fixed WiMAX is a point-to-multipoint 
technology, whereas mobile WiMAX is a multipoint-to-multipoint technology, 
similar to that of a cellular infrastructure. Both solutions are engineered to deliver 
ubiquitous high-throughput broadband wireless service at a low cost. Mobile 
WiMAX uses orthogonal frequency division multiple access (OFDMA) technol- 
ogy which has inherent advantages in latency, spectral efficiency, advanced antenna 
performance, and improved multipath performance in, an NLOS environment. 
Scalable OFDMA (SOFDMA) has been introduced in IEEE 802.16e to support 
scalable channel bandwidths from 1.25 to 20 MHz. Release 1 of mobile WiMAX 
will cover 5, 7, 8.75, and 10 MHz channel bandwidths for licensed worldwide 
spectrum allocations in 2.3 GHz, 2.5 GHz, 3.3 GHz, and 3.5 GHz frequency 
bands. Also, next generation 4G wireless technologies (see Chapter 23) are evolv- 
ing toward OFDMA and IP-based networks as they are ideal for delivering cost- 
effective high-speed wireless data services. 

The WiMAX specification improves upon many of the limitations of the 
Wi-Fi standard (802.11b) by providing increased bandwidth and stronger encryption. 
Table 21.19 provides comparisons of Wi-Fi and WiMAX. 

The 802.16 standard was designed mainly for point-to-multipoint topolo- 
gies, in which a base station distributes traffic to many subscriber stations that are 
mounted on rooftops. The point-to-multipoint configuration uses a scheduling 
mechanism that yields high efficiency because stations transmit in their scheduled 
slots and do not contend with one another. WiMAX does not require stations to 
listen to one another because they encompass a larger area. This scheduling design 
suits WiMAX networks because subscriber stations might aggregate traffic from 
several computers and have steady traffic, unlike terminals in 802.11 hotspots, 
which usually have bursty traffic. The 802.16 also supports a mesh mode, where 
subscriber stations can communicate directly with one another. The mesh mode 
can help relax the line-of-sight requirement and ease the deployment costs for high 
frequency bands by allowing subscriber stations to relay traffic to one another. In 
this case, a station that does not have line-of-sight with the base station can get its 
traffic from another station (see Figure 21.23). 
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Table 21.19 Comparison of Wi-Fi and WiMAX. 


Wi-Fi 


802.11a—OFDM, maximum rate = 54Mbps 
802.11b—DSSS, maximum rate = 11Mbps 
802.11g—OFDM, maximum rate = 54Mbps 


Range <100m 


Indoor environment 
No admission control, no load balancing 


No quality of service (QoS) 


Radio Tower 


WiMAX 


802.16—OFDM, maximum rate = 50 Mbps 
802.16e—OFDM, maximum rate ~ 30 Mbps 


A few km's non-line-of-sight, more with line 
of sight 


Outdoor environment 
Admission control and load balancing 


Five QoS classes enforced by base station 


Figure 21.23 Mesh mode in IEEE 802.16 (WiMAX). 


Mobile WiMAX systems offer scalability in both radio access technology 
and network architecture, thus providing a great deal of flexibility in network 
deployment options and service offerings. Some of the salient features supported 


by WiMAX are: 


* High data rates. The inclusion of multi-input multi-out (MIMO) antenna 
techniques along with flexible sub-channelization schemes, advanced coding 
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and modulation all enable the mobile WiMAX technology to support peak 
downlink data rates of 63 Mbps per sector and peak uplink data rates of up 
to 28 Mbps per sector in a 10 MHz channel. 


Quality of service (QoS). The fundamental premise of the IEEE 802.16 
MAC architecture is QoS. It defines service flows which can map to DiffServ 
code points or MPLS flow labels that enable end-to-end IP based QoS. Addi- 
tionally, sub-channelization and MAP-based signaling schemes provide a 
flexible mechanism for optimal scheduling of space, frequency, and time 
resources over the air interface on a frame-by-frame basis. 


Scalability. Mobile WiMAX is designed to be able to scale to work in dif- 
ferent channelization from 1.25 to 20 MHz to comply with varied world- 
wide requirements as efforts proceed to achieve spectrum harmonization in 
the longer term. 


Security. Support for a diverse set of user credentials exists including SIM/ 
USIM cards, smart cards, digital certificates, and user name/password 
schemes based on the relevant extensible authentication protocol (EAP) 
methods for the credential type. 


Mobility. Mobile WiMAX supports optimized handoff schemes with laten- 
cies less than 50 ms to ensure that real-time applications such as VoIP can be 
performed without service degradation. Flexible key management schemes 
assure that security is maintained during handoff. 


21.15.1 WiMAX Physical Layer (PHY) 

The 802.16 PHY supports TDD and full and half duplex FDD operations; how- 
ever, the initial release of mobile WiMAX only supports TDD. Other advanced 
PHY features include adaptive modulation and coding (AMC), hybrid automatic 
repeat request (HARQ) and fast channel feedback (CQICH) to enhance coverage 
and capacity of WiMAX in mobile applications. 

For the bands in the 10-66 GHz range, 802.16 defines one air interface called 
Wireless MAN —SC. The PHY design for the 2-11 GHz range (both licensed and 
unlicensed bands) is more complex because of interference. Hence, the standard 
supports burst-by-burst adaptability for modulation and coding schemes and spec- 
ifies three interfaces. The adaptive features at the PHY allow trade-off between 
robustness and capacity. The three air interfaces for the 2-11 GHz range are: 


e Wireless MAN —SCa uses single carrier modulation. 

* Wireless MAN— OFDM uses a 256-carrier OFDM. This air interface provides 
multiple access to different stations through time-division-multiple access. 

* Wireless MAN— OFDM uses a 2048-carrier OFDM scheme. The interface 
provides multiple access by assigning a subset of the carriers to an individual 
receiver. 
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Support for QPSK, 16-QAM, and 64-QAM are mandatory in the downlink 
with mobile WiMAX. In the uplink 64-QAM is optional. Both convolutional 
code and turbo code with variable code rate and repetition coding are supported. 
The combinations of various modulation and code rates provide a fine resolution 
of data rates. The frame duration is 5 ms. Each frame has 48 OFDM symbols with 
44 OFDM symbols available for data transmission. 

The base station (BS) scheduler determines the appropriate data rate for 
each burst allocation based on the buffer size, channel propagation conditions 
at the receiver, etc. A channel quality indicator (CQI) channel is used to provide 
channel state information from the user terminals to the BS scheduler. 

WiMAX provides signaling to allow fully asynchronous operation. The 
asynchronous operation allows variable delay between retransmissions which 
gives more flexibility to the scheduler at the cost of additional overhead for each 
retransmission. HARQ combined with CQICH and AMC provides robust link 
adoption in the mobile environment at vehicular speeds in excess of 120 km/h. 


21.15.2 WiMAX Media Access Control (MAC) 

The IEEE 802.16 MAC is significantly different from that of IEEE 802.11b 
Wi-Fi MAC. In Wi-Fi, the MAC uses contention access —all subscribers wishing 
to pass data through an access point compete for the access point's (AP's) atten- 
tion on a random basis. This can cause distant nodes from the AP to be repeatedly 
interrupted by less sensitive, closer nodes, greatly reducing their throughput. This 
makes services, such as VoIP or IPTV which depend on a determined level of QoS, 
difficult to maintain for large numbers of users. 

The MAC layer of 802.16 is designed to serve sparsely distributed stations 
with high data rates. Subscriber stations are not required to listen to one another 
because this listening might be difficult to achieve in the WiMAX environment. 
The 802.16 MAC is a scheduling MAC where the subscriber only has to compete 
once (for initial entry into the network). After that it is allocated a time slot by the 
base station. The time slot can enlarge and constrict, but it remains assigned to the 
subscriber, meaning that other subscribers are not supposed to use it but take their 
turn. This scheduling algorithm is stable under overload and oversubscription. It 
is also more bandwidth efficient. The scheduling algorithm allows the base station 
to control QoS by balancing the assignment among the needs of subscribers. 

Duplexing, a station's concurrent transmission and reception, is possible 
through time division duplex (TDD) and frequency division duplex (FDD). In 
TDD, a station transmits then receives (or vice versa) but not at the same time. 
This option helps reduce subscriber station costs, because the radio is less complex. 
In FDD, a station transmits and receives simultaneously on different channels. 

The 802.16 MAC protocol is connection-oriented and performs link adapta- 
tion and ARQ functions to maintain target bit error rate while maximizing the 
data throughput. It supports different transport technologies such as IPv4, IPv6, 
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Ethernet, and ATM. This lets service providers use WiMAX independently of the 
transport technology they support. 

The recent WiMAX standard, which adds full mesh networking capabilities, 
enables WiMAX nodes to simultaneously operate in “subscriber” and “base sta- 
tion” mode. This blurs the initial distinction and allows for widespread adoption 
of WiMAX based mesh networks and promises widespread WiMAX adoption. 
Mobile WiMAX with OFDMA and scheduled MAC allows wireless mesh net- 
works to be much more robust and reliable. 


21.15.3 Spectrum Allocation for WiMAX 

The IEEE 802.16 specification applies across a wide swath of RF spectrum. There 
is no uniform global licensed spectrum for WiMAX in the United States. The 
biggest segment available is around 2.5 GHz, and is already assigned — primar- 
ily to Sprint Nextel. Elsewhere in the world, the most likely bands used will be 
around 3.5 GHz, 2.3/2.5 GHz, or 5 GHz, with 2.3/2.5 GHz probably being most 
important in Asia. 

There is some prospect that some of a 700 MHz band might be made avail- 
able for WiMAX in the United States, but it is currently assigned to analog TV 
and awaits the complete rollout of HD digital TV before it can become avail- 
able, likely by 2009. There are several variants of 802.16, depending on local 
regulatory conditions and thus of which spectrum is used. 

Mobile WiMAX based on the 802.16e standard will most likely be in 
2.3 GHz and 2.5 GHz frequencies—low enough to accommodate the NLOS 
conditions between the base station and mobile devices. The key technologies in 
802.16e on PHY level аге OFDMA and SOFDMA. OFDMA uses a multicarrier 
modulation in which the carriers are divided among users to form subchannels 
(see Figure 21.24). For each subchannel, the coding and modulation are adapted 
separately, allowing channel optimization on a smaller scale (rather than using 
the same parameters for the whole channel). This technique optimizes the use of 
spectrum resources and enhances indoor coverage by assigning a robust scheme to 
vulnerable links. SOFDMA is an enhancement of OFDMA that scale the number 
of subcarriers in a channel with possible values of 128, 512, 1024, and 2048. 

802.16e includes power-saving and sleep modes to extend the battery life 
of mobile devices. 802.16e also supports hard and soft handoff to provide users 
with seamless connections as they move across coverage areas of adjacent cells. 
Other improvements for mobile devices include a real-time polling service to 
provide QoS, HARQ scheme to retransmit erroneous packets, and private key 
management schemes to help with the distribution of encryption keys. 


21.16 Summary 


In this chapter we provided an overview of the wireless local area networks 
(WLANs). We divided WLAN standards into IEEE 802.11 connectionless and 
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Figure 21.24 OFDM and OFDMA in 802.16e. 


ETSI HIPERLAN/2 connection-oriented networks. HIPERLAN/2 is useful for 
variable QoS support. IEEE 802.11 WLAN uses FHSS and DSSS techniques to 
offer data rates up to 11 Mbps. 

Bluetooth is a digital wireless data transmission standard in the 2.4 GHz 
ISM band aimed at providing a short-range, wireless link between laptops, mobile 
phones, and other devices. The IEEE 802.11 WLANs also operate in this fre- 
quency band. Since both systems operate in the same frequency band, interference 
between them is caused. We evaluated the performance of the Bluetooth MAC 
layer when Bluetooth radio operates in close proximity of other Bluetooth pico- 
nets and IEEE 802.11 WLANs. A probabilistic approach was suggested to obtain 
the packet error rate (PER) of a Bluetooth piconet and the aggregated throughput 
of N collocated piconets. 

The chapter concluded by providing a brief description of the IEEE 802.16 
standard for metropolitan area networks (MAN) and highlighting the features of 
the WiMAX. 
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Problems 


21.1 
21.2 
21.3 


21.4 
21.5 


21.6 
21.7 
21.8 
21.9 
21.10 


21.11 


21.12 


21.13 


21.14 


What are the application fields of a WLAN? 
Discuss WLAN topologies. 


What are the two network architectures for the WLAN defined in the 
TEEE 802.11 standard? Discuss them briefly. 


What is CSMA/CA protocol? 


What are the hidden and exposed node problems in a WLAN? Discuss 
them briefly. 


What is a Wi-Fi? Discuss briefly. 

What is IEEE 802.11n? Discuss briefly. 

Discuss the exponential backoff algorithm used in a WLAN. 
What is the HiSWAN? Discuss briefly. 


In the HIPERLAN/2 PHY layer, 64-subchannel implementation is used. 
48 subcarriers are used for information transmission, 4 subcarriers for 
pilot tones used for synchronization, and 12 subcarriers reserved for 
other purposes. The HIPERLAN/2 standard uses 16-QAM with К = 9/16 
coding for an actual payload data transmission rate of 27 Mbps. Calcu- 
late the coded symbol transmission rate per subcarrier. What is the bit 
transmission rate per subcarrier? 


In a DSSS WLAN how many simultaneous data users at 38.4kbps can 
be supported by an AP so that an average bit error data rate of 1073 
is maintained for each user? Assume the following data: spreading 
rate — 3.84 Mcps, power control efficiency — 0.8, interference factor from 
other terminals = 0.67, 3-sector antenna gain = 2.55, and cell loading = 
7096. Assuming that each user transmits on average 8 packets per second, 
what is the average packet length that can be used in the system? 


An FHSS WLAN system uses a 50kHz channel over a continuous 
20MHz spectrum. Fast frequency hopping is used, in which two hops 
occur for each bit. If binary frequency shift keying (BFSK) is the modula- 
tion scheme used in the system, determine (a) number of hops per second 
if each user transmits 25kbps data, and (b) probability of error for a 
single user operating at E,/No equal to 10 dB. 


If we switch from 36 Mbps mode to 9 Mbps mode in WLAN, how much 
more (in dB) of the path loss can be afforded? If the system covers 50m 
with 36 Mbps, what would be the coverage with 9 Mbps? 


Consider the Bluetooth and IEEE 802.11 FH interference scenario (refer to 
Figure 21.20). If the acceptable error probability for the mobile terminal 
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is 1074, find (a) (SIR)min that supports this error rate, and (b) calculate 
Tmax for d = 12m, y = 4.3, Рвт = 23 dBm and Pap = 43 dBm. What is 
Tmax if the IEEE 802.11 FH device is replaced by the IEEE 802.11 DS 
device? 


21.15 Find the collision probability of 1200 bytes IEEE 802.11 FH packet at 


2 Mbps and the Bluetooth. Assume dwell period of an 802.11 transmis- 
sion to be 3ms and Bluetooth packet duration 0.625 ms. What is PER 
with IEEE 802.11 DS? 


21.16 Discuss WiMax. 
21.17 What are the main differences between the IEEE 802.11b (Wi-Fi) and 


WiMax? 
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APPENDIX A 
Traffic Tables 


This appendix provides traffic tables (Tables A.1 through A.9) for a variety of 
blocking probabilities and channels." The blocked-calls-cleared (Erlang-B) call 
model is used. In Erlang B, we assume that, when traffic arrives in the system, it 
either is served, with probability from the table, or is lost to the system. A cus- 
tomer attempting to place a call therefore either will see a call completion or will 
be blocked and abandon the call. This assumption is acceptable for low blocking 
probabilities. In some cases, the call will be placed again after a short period of 
time. If too many calls reappear in the system after a short delay, the Erlang-B 
model will no longer hold. 

In Tables A.8 and A.9, where the number of channels is high (greater than 
250 channels), linear interpolation between two table values is possible. We pro- 
vide the deltas for one additional channel to assist in the interpolation. 


*The data in the tables was supplied by V. H. MacDonald. 
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Table A.1 Offered loads (in Erlangs) for various blocking objectives: according to the 
Erlang-B model — system capacity from 1-20 channels. 


P(B) - Trunks 0.01 0.015 0.02 0.03 0.05 0.07 0.1 0.2 0.5 


= 


0.010 0.015 0.020 0.031 0.053 0.075 0.111 0.250 1.000 


2 0.153 0.190 0.223 0.282 0.381 0.471 0.595 1.000 2.732 
3 0.455 0.536 0.603 0.715 0.899 1.057 1.271 1.930 4.591 
4 0.870 0.992 1.092 1.259 1.526 1.748 2.045 2.944 6.501 
5 1.361 1.524 1.657 1.877 2.219 2.504 2.881 4.010 8.437 
6 1.913 2.114 2.277 2.544 2.961 3.305 3.758 5.108 10.389 
7 2.503 2.743 2.936 3.250 3.738 4.139 4.666 6.229 12.351 
8 3.129 3.405 3.627 3.987 4.543 4.999 5.597 7.369 14.318 
9 3.783 4.095 4.345 4.748 5.370 5.879 6546 8.521 16.293 
10 4.462 4.808 5.084 5.529 6.216 6.776 7.511 9.684 18.271 
11 5.160 5.539 5.842 6.328 7.076 7.687 8.487 10.857 20.253 
12 5.876 6.287 6.615 7.141 7.950 8.610 9.477 12.036 22.237 
13 6.607 7.049 7.402 7.967 8.835 9.543 10.472 13.222 24.223 
14 7.352 7.824 8.200 8.803 9.730 10.485 11.475 14.412 26.211 
15 8.108 8.610 9.010 9.650 10.633 11.437 12.485 15.608 28.200 
16 8.875 9.406 9.828 10.505 11.544 12.393 13.501 16.807 30.190 
17 9.652 10.211 10.656 11.368 12.465 13.355 14.523 18.010 32.181 
18 10.450 11.024 11.491 12.245 13.389 14.323 15.549 19.215 34.173 
19 11.241 11.854 12.341 13.120 14.318 15.296 16.580 20.424 36.166 


20 12.041 12.680 13.188 14.002 15.252 16.273 17.614 21.635 38.159 
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Table A.2 Offered loads (in Erlangs) for various blocking objectives: according to the 
Erlang-B model—system capacity from 20-39 channels. 


P(B) = Trunks 0.005 


20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 
35 
36 
37 
38 
39 


11.092 
11.860 
12.635 
13.429 
14.214 
15.007 
15.804 
16.607 
17.414 
18.226 
19.041 
19.861 
20.685 
21.512 
22.342 
23.175 
24.012 
24.852 
25.694 
26.539 


0.01 


12.041 
12.848 
13.660 
14.479 
15.303 
16.132 
16.966 
17.804 
18.646 
19.493 
20.343 
21.196 
22.053 
22.913 
23.776 
24.642 
25.511 
26.382 
27.256 
28.132 


0.015 


12.680 
13.514 
14.352 
15.196 
16.046 
16.900 
17.758 
18.621 
19.487 
20.357 
21.230 
22.107 
22.987 
23.869 
24.755 
25.643 
26.534 
27.427 
28.322 
29.219 


0.02 


13.188 
14.042 
14.902 
15.766 
16.636 
17.509 
18.387 
19.269 
20.154 
21.043 
21.935 
22.830 
23.728 
24.629 
25.532 
26.438 
27.346 
28.256 
29.168 
30.083 


0.03 


14.002 
14.890 
15.782 
16.679 
17.581 
18.486 
19.395 
20.308 
21.224 
22.143 
23.065 
23.989 
24.917 
25.846 
26.778 
27.712 
28.649 
29.587 
30.527 
31.469 


0.05 


15.252 
16.191 
17.134 
18.082 
19.033 
19.987 
20.945 
21.905 
22.869 
23.835 
24.803 
25.774 
26.747 
27.722 
28.699 
29.678 
30.658 
31.641 
32.624 
33.610 


0.07 


16.273 
17.255 
18.240 
19.229 
20.221 
21.216 
22.214 
23.214 
24.217 
25.222 
26.229 
27.239 
28.250 
29.263 
30.277 
31.294 
32.312 
33.331 
34.351 
35.373 


0.1 


17.614 
18.652 
19.693 
20.737 
21.784 
22.834 
23.885 
24.939 
25.995 
27.053 
28.113 
29.174 
30.237 
31.302 
32.367 
33.435 
34.503 
35.572 
36.643 
37.715 
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Table A.3 Offered loads (in Erlangs) for various blocking objectives: according to the 
Erlang-B model — system capacity from 40-60 channels. 


P(B) = Trunks 0.005 0.01 0.015 0.02 0.03 0.05 0.07 0.1 


40 27.387 29.011 30.119 30999 32.413 34.597 36.397 38.788 
41 28.237 29.891 31.021 31.918 33.359 35.585 37.421 39.861 
42 29.089 30.774 31.924 32.838 34.306 36.575 38.447 40.936 
43 29.944 31.659 32.830 33.760 35.255 37.565 39.473 42.012 
44 30.801 32.546 33.737 34.683 36.205 38.558 40.501 43.088 
45 31.660 33.435 34.646 35.609 37.156 39.551 41.530 44.165 
46 32.521 34.325 35.556 36.535 38.109 40.545 42.559 45.243 
47 33.385 35.217 36.468 37.463 39.063 41.541 43.590 46.322 
48 34.250 36.111 37.382 38.393 40.019 42.537 44.621 47.401 
49 35.116 37.007 38.297 39.324 40.976 43.535 45.654 48.481 
50 35.985 37.904 39.214 40.257 41.934 44.534 46.687 49.562 
51 36.856 38.802 40.132 41.190 42.893 45.533 47.721 50.644 
52 37.728 39.702 41.052 42.125 43.853 46.533 48.756 51.726 
53 38.601 40.604 41.972 43.061 44.814 47.535 49.791 52.808 
54 39.477 41.507 42.894 43.999 45.777 48.537 50.827 53.891 
55 40.354 42.411 43.817 44.937 46.740 49.540 51.864 54.975 
56 41.232 43.317 44.742 45.877 47.704 50.544 52.902 56.059 
57 42.112 44.224 45.667 46.817 48.689 51.548 53.940 57.144 
58 42.993 45.132 46.594 47.759 49.636 52.553 54.979 58.229 
59 43.875 46.041 47.522 48.701 50.603 53.559 56.018 59.315 


60 44.759 46.951 48.451 49.645 51.570 54.5666 57.058 60.401 


Appendix А Traffic Tables 


781 


Table A.4 Offered loads (in Erlangs) for various blocking objectives: according to the 
Erlang-B model—system capacity from 61-80 channels. 


P(B) = Trunks 


61 
62 
63 
64 
65 
66 
67 
68 
69 
70 
71 
72 
73 
74 
75 
76 
77 
78 
79 
80 


0.005 


45.644 
46.531 
47.418 
48.307 
49.197 
50.088 
50.980 
51.874 
52.768 
53.663 
54.560 
55.457 
56.356 
57.255 
58.155 
59.056 
59.958 
60.861 
61.765 
62.669 


0.01 


47.863 
48.776 
49.689 
50.604 
51.520 
52.437 
53.355 
54.273 
55.193 
56.113 
57.035 
57.957 
58.880 
59.804 
60.729 
61.654 
62.581 
63.508 
64.435 
65.364 


0.015 


49.381 
50.311 
51.243 
52.176 
53.110 
54.044 
54.980 
55.916 
56.853 
57.791 
58.730 
59.670 
60.610 
61.551 
62.493 
63.435 
64.379 
65.322 
66.267 
67.212 


0.02 


50.590 
51.535 
52.482 
53.429 
54.377 
55.326 
56.276 
57.226 
58.178 
59.130 
60.083 
61.036 
61.991 
62.945 
63.901 
64.857 
65.814 
66.772 
67.730 
68.689 


0.03 


52.539 
53.509 
54.479 
55.450 
56.422 
57.395 
58.368 
59.342 
60.316 
61.292 
62.268 
63.244 
64.222 
65.199 
66.178 
67.157 
68.136 
69.116 
70.097 
71.078 


0.05 


55.573 
56.581 
57.590 
58.599 
59.609 
60.620 
61.631 
62.642 
63.654 
64.667 
65.680 
66.694 
67.708 
68.723 
69.738 
70.753 
71.769 
72.786 
73.803 
74.820 


0.07 


58.099 
59.140 
60.181 
61.224 
62.266 
63.309 
64.353 
65.397 
66.442 
67.487 
68.532 
69.578 
70.624 
71.671 
72.718 
73.765 
74.813 
75.861 
76.909 
77.958 


0.1 


61.488 
62.575 
63.663 
64.750 
65.839 
66.927 
68.016 
69.106 
70.196 
71.286 
72.376 
73.467 
74.558 
75.649 
76.741 
77.833 
78.925 
80.018 
81.110 
82.203 
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Table A.5 Offered loads (in Erlangs) for various blocking objectives: according to the 
Erlang-B model — system capacity from 81-100 channels. 


P(B) = Trunks 0.005 0.01 0.015 0.02 0.03 0.05 0.07 0.1 
81 63.574 66.293 68.158 69.648 72.059 75.838 79.007 83.297 
82 64.481 67.223 69.104 70.608 73.042 76.856 80.057 84.390 
83 65.387 68.153 70.051 71.568 74.024 77.874 81.107 85.484 
84 66.295 69.085 70.999 72.529 75.007 78.893 82.157 86.578 
85 67.204 70.016 71.947 73.491 75.991 79.912 83.207 87.672 
86 68.113 70.949 72.896 74.453 76.975 80.932 84.258 88.767 
87 69.023 71.882 73.846 75.416 77.959 81.952 85.309 89.861 
88 69.933 72.816 74.796 76.379 78.944 82.972 86.360 90.956 
89 70.844 73.750 75.746 77.342 79.929 83.993 87.411 92.051 
90 71.756 74.685 76.697 78.306 80.915 85.014 88.463 93.146 
91 72.669 75.621 77.649 79.271 81.901 86.035 89.515 94.242 
92 73.582 76.557 78.601 80.236 82.888 87.057 90.568 95.338 
93 74.496 77.493 79.553 81.202 83.875 88.079 91.620 96.434 
94 75.411 78.431 80.506 82.167 84.862 89.101 92.673 97.530 
95 76.326 79.368 81.460 83.134 85.850 90.123 93.726 98.626 
96 77.242 80.307 82.414 84.101 86.838 91.146 94.779 99.722 
97 78.158 81.245 83.368 85.068 87.827 92.169 95.833 100.819 
98 79.075 82.185 84.323 86.036 88.815 93.193 96.887 101.916 
99 79.993 83.125 85.279 87.004 89.805 94.217 97.941 103.013 


100 80.911 84.065 86.235 87.972 90.794 95.240 98.995 104.110 
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Table A.6 Offered loads (in Erlangs) for various blocking objectives: according to the 


Erlang-B model—system capacity from 105-200 channels. 


P(B) = Trunks 0.005 


105 
110 
115 
120 
125 
130 
135 
140 
145 
150 
155 
160 
165 
170 
175 
180 
185 
190 
195 
200 


85.518 

90.147 

94.768 

99.402 
104.047 
108.702 
113.366 
118.039 
122.720 
127.410 
132.106 
136.810 
141.520 
146.237 
150.959 
155.687 
160.421 
165.160 
169.905 
174.653 


0.01 


88.822 

93.506 

98.238 
102.977 
107.725 
112.482 
117.247 
122.019 
126.798 
131.584 
136.377 
141.175 
145.979 
150.788 
155.602 
160.422 
165.246 
170.074 
174.906 
179.743 


0.015 


91.030 

95.827 
100.631 
105.444 
110.265 
115.094 
119.930 
124.773 
129.622 
134.477 
139.337 
144.203 
149.074 
153.949 
158.829 
163.713 
168.602 
173.494 
178.390 
183.289 


0.02 


92.823 

97.687 
102.552 
107.426 
112.307 
117.195 
122.089 
126.990 
131.896 
136.807 
141.724 
146.645 
151.571 
156.501 
161.435 
166.373 
171.315 
176.260 
181.209 
186.161 


0.03 


95.747 
100.713 
105.680 
110.655 
115.636 
120.622 
125.615 
130.612 
135.614 
140.621 
145.632 
150.647 
155.665 
160.688 
165.713 
170.742 
175.774 
180.809 
185.847 
190.887 


0.05 


100.371 
105.496 
110.632 
115.772 
120.918 
126.068 
131.222 
136.380 
141.542 
146.707 
151.875 
157.047 
162.221 
167.398 
172.577 
177.759 
182.943 
188.129 
193.318 
198.508 


0.07 


104.270 
109.550 
114.833 
120.121 
125.413 
130.708 
136.007 
141.309 
146.613 
151.920 
157.230 
162.542 
167.856 
173.173 
178.491 
183.811 
189.133 
194.456 
199.781 
205.108 


0.1 


109.598 
115.090 
120.585 
126.083 
131.583 
137.087 
142.593 
148.101 
153.611 
159.122 
164.636 
170.152 
175.668 
181.187 
186.706 
192.227 
197.750 
203.273 
208.797 
214.323 
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Table A.7 Offered loads (in Erlangs) for various blocking objectives: according to the 
Erlang-B model— system capacity from 205-245 channels. 


P(B) = Trunks 0.005 0.01 0.015 0.02 0.03 0.05 0.07 0.1 
205 179.407 184.584 188.192 191.116 195.930 203.700 210.436 219.849 
210 184.165 189.428 193.099 196.073 200.976 208.894 215.765 225.376 
215 188.927 194.276 198.008 201.034 206.023 214.089 221.096 230.904 
220 193.694 199.127 202.920 205.997 211.073 219.287 226.427 236.433 
225 198.464 203.981 207.836 210.963 216.125 224.485 231.760 241.963 
230 203.238 208.839 212.754 215.932 221.180 229.686 237.094 247.494 
235 208.016 213.700 217.675 220.902 226.236 234.887 242.430 253.025 
240 212.797 218.564 222.598 225.876 231.294 240.090 247.766 258.557 
245 217.582 223.430 227.524 230.851 236.354 245.295 253.103 264.089 


Table A.8 Offered loads (in Erlangs) for various blocking objectives: according to the 
Erlang-B model—system capacity from 250-600 channels. 


P(B) = Trunks 0.005 0.01 0.015 0.02 0.03 0.05 0.07 0.1 


250 222.370 228.300 232.452 235.828 241.415 250.500 258.441 269.622 
delta 0.961 0.977 0.988 0.998 1.015 1.042 1.069 1.107 
300 270.410 277.144 281.853 285.707 292.142 302.617 311.866 324.961 
delta 0.966 0.980 0.991 1.001 1.017 1.044 1.070 1.108 
350 318.698 326.155 331.424 335.738 342.995 354.836 365.359 380.384 
delta 0.969 0.984 0.994 1.005 1.018 1.045 1.071 1.109 
400 367.163 375.334 381.128 385.963 393.895 407.096 418.890 435.813 
delta 0.972 0.989 0.998 1.004 1.020 1.046 1.071 1.109 
450 415.779 424.774 431.022 436.178 444.877 459.408 472.456 491.263 
delta 0.975 0.987 0.997 1.006 1.021 1.047 1.072 1.109 
500 464.518 474.130 480.890 486.480 495.919 511.759 526.049 546.730 
delta 0.977 0.989 0.999 1.007 1.022 1.048 1.072 1.110 
550 513.361 523.600 530.843 536.846 547.012 564.142 579.663 602.208 
delta 0.979 0.991 1.000 1.008 1.023 1.048 1.073 1.110 


600 562.292 573.142 580.859 587.267 598.145 616.552 633.295 657.697 
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Table A.9 Offered loads (in Erlangs) for various blocking objectives: according to the 
Erlang-B model—system capacity from 600-1050 channels. 


P(B) = Trunks 0.005 


600 
delta 
650 
delta 
700 
delta 
750 
delta 
800 
delta 
850 
delta 
900 
delta 
950 
delta 
1000 
delta 
1050 


562.292 
0.983 
611.418 
0.981 
660.462 
0.982 
709.586 
0.984 
758.762 
0.985 
807.987 
0.985 
857.256 
0.986 
906.565 
0.987 
955.910 
0.988 
1005.289 


0.01 


573.142 
0.992 
622.748 
0.993 
672.410 
0.994 
722.119 
0.995 
771.872 
0.996 
821.662 
0.996 
871.487 
0.997 
921.343 
0.998 
971.226 
0.998 


0.015 


580.859 
1.001 
630.927 
1.002 
681.042 
1.003 
731.196 
1.004 
781.386 
1.004 
831.608 
1.005 
881.857 
1.005 
932.132 
1.006 
982.430 
1.006 


1021.136 1032.748 


0.02 


587.267 
1.009 
637.732 
1.010 
688.238 
1.011 
738.777 
1.011 
789.346 
1.012 
839.942 
1.012 
890.561 
1.013 
941.202 
1.013 
991.862 
1.014 
1042.539 


0.03 


598.145 
1.023 
649.313 
1.024 
700.511 
1.024 
751.735 
1.025 
802.981 
1.025 
854.247 
1.026 
905.530 
1.026 
956.829 
1.026 
1008.142 
1.027 
1059.468 


0.05 


616.552 
1.049 
668.982 
1.049 
721.432 
1.049 
773.896 
1.050 
826.375 
1.050 
878.865 
1.050 
931.365 
1.050 
983.875 
1.050 
1036.393 
1.050 
1088.918 


0.07 


633.295 
1.073 
686.941 
1.073 
740.598 
1.073 
794.266 
1.074 
847.943 
1.074 
901.627 
1.074 
955.317 
1.074 
1009.013 
1.074 
1062.715 
1.074 
1116.420 


0.1 


657.697 
1.110 
713.193 
1.110 
768.697 
1.110 
824.206 
1.110 
879.719 
1.110 
935.236 
1.110 
990.757 
1.110 
1046.281 
1.111 
1101.808 
1.111 
1157.337 
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Acronyms 


Authentication, Authorization, and Accounting 
Additional Authentication Data 
ATM Adaptation Layer 

Answer-Busy Ratio 

Average Busy Season 

Authentication Center 

Associated Control Channel 
Algebraic Code Excitation Linear Prediction 
Association Control Function 

Access Channel 

Adjacent Channel Interference 
Acknowledgment 

Acknowledgment Channel 
Asynchronous Connectionless 
Address Complete Message 
Association Control Service Element 
Analog-to-Digital Converter 
Adaptive Differential Pulse Code Modulation 
Advanced Encryption Standard 
Automatic Gain Control 

Access Grant Channel 

Acquisition Indicator Channel 
Anonymity Key 

Authentication and Key Agreement 
Authentication Key 

Application Layer 

Automatic Link Transfer 

Access Link Control Application Part 
Adaptive Modulation and Coding 
Advanced Mobile Phone System 
Adaptive Multi-Rates 

Ad hoc On-demand Distance Vector 


787 


788 


AP 
APBBS 
APC 
API 
APN 
ARIB 
ARP 
ARQ 
ASIC 
ASK 
ASR 
AT 
ATC 
ATDPICH 
ATIS 
ATM 
AuC 
AWGN 


Access Point 

Antipodal Baseband Signaling 

Automatic Power Control 

Application Programming Interface 

Access Point Name 

Association of Radio Industries and Business 
Address Resolution Protocol 

Automatic Repeat Request 

Application Specific Integrated Circuit 
Amplitude Shift Keying 

Answer-Seizure Ratio 

Attention 

Adaptive Transform Coding 

Auxiliary Transmit Diversity Pilot Channel 
Alliance for Telecommunications Industry Solutions 
Asynchronous Transmission Mode 
Authentication Center 

Additive White Gaussian Noise 


Blocked Call Clear 
Broadcast Control Channel 
Blocked Call Delayed 
Broadcast Channel 

Bit Error Rate 

Busy Hour 

Busy Hour Call Attempt 
Block Error Rate 

Binary Phase Shift Keying 
Base Station 

Base Station Identity Code 
Base Station Controller 
Base Station Subsystem 
Base System Station GPRS Control 
Basic Service Set Identifier 
Base-station Transceiver 
Broadband Wireless Access 


Code 
Collision Avoidance 


Acronyms 


Acronyms 


CAC 
CACH 
CAMEL 
CAP 
CASE 
CATV 
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Channel Access Control 

Common Assignment Channel 

Customized Applications for Mobile Enhanced Logic 
Contention-Access Period 

Common Application Service Elements 

Community Antenna Television 

Cellular Authentication and Voice Encryption 
Contention Access Period 

Cipher Block Chaining-Message Authentication Code 
Cluster Based Routing Protocol 

Cell Broadcast Channel 

Call Control 

Clear Channel Assessment 

Control Channel 

Common Control Channel 

Committee on Communications and Information Policy 
Complementary Code Keying 

Centrum Call Seconds 

Counter-mode/block Chaining Message Authentication Code 
Protocol 

Commitment Concurrency and Recovery 

Collision Detection 

CDMA Development Group 

Code Division Multiplex 

Code Division Multiple Access 

Cellular Digital Packet Data 

Code-Excited Linear Predictive 

Conference Européene des administrations des Postes et des 
Télécommunications 

Contention-Free Period 

Cell Global Identity 

Cluster Head 

Challenge Handshake Authentication Protocol 

Call Counter 

Compact HTML 

Cell Identification 

Cluster Identification 

Ciphering Key 

Convergence Layer 

Cluster Head 

Connectionless Interworking Protocol 
Complementary Metal Oxide Semiconductor 
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Core Network 

Core Network Bearer 

Care-of Address 

Common Packet Channel 
Common Power Control Channel 
Common Pilot Channel 
Common Physical Channel 
Continuous Phase Modulation 
Central Processing Unit 
Channel Quality 

Channel Quality Channel 
Cognitive Radio 

Cyclic Redundancy Check 
Circuit Switched 

Cell State Control Function 
Common Signaling Channel 
Circuit Switched Data 

Carrier Sense Multiple Access 
Cascading Style Sheet 

Cluster Switch Gateway Routing 
Cordless Telephony 2 
Common Traffic Channel 
Clear to Send 

Contention Window 


Destination Address 

Digital Audio Broadcast 

Digital Advanced Mobile Phone System 
Dedicated Auxiliary Pilot Channel 
Decibel 

Differential Binary Phase Shift Keying 
Dedicated Control 

DLC Connection Control 

Dedicated Channel 

Dedicated Control Channel 
Distributed Coordination Function 
Designated Device 


Digital Enhancements of Cordless Technology 


Data Encryption Standard 
Dynamic Frequency Selection 
Diffie-Hellman 


Acronyms 


Acronyms 


DHCP 
DID 
DiffServ 
DiL 


DLL 


DNS 
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Dynamic Host Configuration Protocol 
Direct Inward Dialing 

Differentiated Services 

Directlink Phase 

Distributed Inter-Frame Space 
Downlink 

Data Link Control 

Data Link Control Identity 

Data Link Layer 

dedicated MAC channel control 
Domain Name Server 

Data Only 

Dedicated Physical Channel 

Dedicated Physical Control Channel 
Delta Pulse Code Modulation 
Dedicated Physical Data Channel 
Differential Quadrature Phase Shift Keying 
Datarate Request Channel 

Drift Radio Network Controller 
Direct Sequence 

Direct Sequence Code Division Multiple Access 
Dedicated Signaling Channel 
Downlink Shared Channel 

Digital Signal Processor 

Dynamic Source Routing 

Dedicated Short Range Communication 
Distribution System Service 

Direct Sequence Spread Spectrum 
Destination Sequenced Distance Vector 
Discontinuous Transmission 

Dedicated traffic channel 

Data and Voice 

Digital Video Broadcast 


Enhanced Access Channel 

Extensible Authentication Protocol 

Extensive Authentication Protocol over LANs 
EAP-Over WLAN 

Eavesdrop-And-Register 

Error Control 

Elliptic Curve Cryptography 
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Acronyms 


Explicit Congestion Notification 
Enhanced Circuit Switched Data 

Energy Detection 

External Data Network 

Enhanced Data rates for GSM Evolution 
Electrically Erasable PROM 

Enhanced Full Rate 

Enhanced General Packet Radio Service 
Erasure Indicator Bit 

Extended Inter-Frame Space 

Equipment Identity Register 

Effective Isotropic Radiated Power 
Explicit Loss Notification 

Electro Magnetic Interference 

Element Manager System 

Erasable Programmable Read Only Memory 
Effective Radiated Power 

Electronic Serial Number 

Extended Service Set 

Event-to-Sink Reliable Transport 
Enhanced Service Set ID 

European Telecommunications Standards Institute 
Enhanced Version 

Evolution for Data-Only 

Evolution for Data and Voice 

Enhanced Variable Rate Codec 


Foreign Agent 

Fast Associated Control Channel 
Forward Access Channel 

Fast Uplink Signaling Channel 
FeedBack Information 

Federal Communications Commission 
Frequency Correction Channel 
Fundamental Channel 

Frame Check Sequence 

Full Duplex 

Frequency Division Duplex 
Frequency Division Multiplexing 
Frequency Division Multiple Access 
Forward Error Correction 


Acronyms 


793 


Frame Error Rate 

Full Function Device 

Fast Forward Power Control 

Fast Fourier Transform 

Frequency Hopping 

Frequency Hopping DFDM 

Frequency Hopping Multiple Access 
Frequency Hopping Spread Spectrum 
Federal Information Processing Standard 
Frequency Modulation 

Freedom Of Mobile Access 
Forward-Packet Data Control Channel 
Forward Packet Data Channel 

Fully Qualified Domain Name 

Frame Relay 

Frequency Shift Keying 

Frequency Time 

File Transfer Protocol 


First-Generation 
Second-Generation 
Third-Generation 
Fourth-Generation 

Go-Back-N 

GPRS Backbone System 

General Control 

Global Cell Identity 

Gaussian Frequency Shift Keying 
Gateway GPRS Support Node 
GPRS Interworking Function 
GPRS Mobility Management 
Gateway Mobile Switching Center 
Gaussian Minimum Shift Keying 
Grade of Service 

General Packet Radio Service 
Global Positioning System 
Generic Routing Encapsulation 
Groupe Special Mobile/Global System for Mobile 
Communications 

GPRS Support Node 

Global Title 
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HDR 
HIPERLAN 
HIPERMAN 
HLR 


Acronyms 


GPRS Tunneling Protocol 
Guaranteed Time Slot 


Home Agent 

Hybrid Automatic Repeat Request 

Host Controller Interface 

High Day 

High Data Rate 

High Performance Radio Local Area Network 
High Performance Metropolitan Area Network 
Home Location Register 

Home Address 

High-Speed Circuit Switched Data 

High-Speed Downlink Shared Channel 
High-Speed Downlink Packet Access 
High-Speed Dedicated Physical Control Channel 
High Speed Shared Control Channel 

High Rate 

Hyper Text Markup Language 

Hyper Text Transfer Protocol 

High-speed Unlicensed Metropolitan Area Network 


Initial Address Message 

Independent Basic Service Set 
Interference Cancellation 

Internet Control Message Protocol 
International Data Encryption Algorithm 
Internet Engineering Task Force 
Intermediate Frequency 

Inverse Fast Frequency Transform 
Internet Group Management Protocol 
Internet Header Length 

Internet Key Exchange 

Inter Modulation 

International Mobile Equipment Identity 
IP Multimedia Service 

International Mobile Subscriber Identity 
IMT Direct Spread 

IMT Frequency Time 


Acronyms 


IMT-MC 
IMT-SC 
IMT-2000 
IN 
IN/CAMEL 


IntServ 
IOS 
IP 
IPCP 
IPSec 
IR 
IrDA 
ISDN 
ISI 
ISM 
ISMA 


IMT Multicarrier 

IMT Single Carrier 

International Mobile Telecommunications-2000 
Intelligent Network 

Intelligent Network/Customized Applications for Mobile 
Enhanced Logic 

Integrated Services 

Interoperability Specifications 

Internet Protocol 

Internet Protocol Control Protocol 

Internet Protocol Security 

Impulse Radio 

Infrared Data Association 

Integrated Services of Digital Network 
Inter-Symbol Interference 

Industrial, Scientific, and Medicine 

Idle Signal Casting Multiple Access 

Internet Service Provider 

ISND User Part 

International Telecommunications Union 
Indirect TCP 

International Telecommunications Union-Technical 
Inter Working Function 

Inter Working MSC 


Joint Technical Committee 


Key Performance Indicator 


Logical Link Control and Adaptation Protocol 
Location Area 

Link Access Channel 

Location Area Code 

Location Area Identity 

Location Area Network 

Link Access Protocol D 

Level Crossing Rate 
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LCP 

LD 
LDAP 
LD-CELP 
LEACH 
LEO 

LL 


Acronyms 


Link Control Protocol 

Low Delay 

Lightweight Directory Access Protocol 
Long delay-CELP 

Low-Energy Adaptive Cluster Hierarchy 
Low Earth Orbit 

Link Layer 

Link Protocol 

Logical Link Control 

Local Multipoint Distribution System 
Link Management Layer 

Link Manager Protocol 

Local Oscillator 

Lowest Order Modulation 

Line of Sight 

Linear Predictor 
Linear-Prediction-Based Analysis-by-Synthesis 
Linear Prediction Coding 

Linear Pass Filter 

Link Quality Indication 

Low Rate 

Linear Spectral Pair 

Long Term 

Long-Term Prediction 

Location Update 


Media Access Control 

Mobile multimedia, Anytime anywhere, Global mobility support, 
Integrated wireless solution, and Customised personal service. 
Mobile Assisted Handoff 

Mobile Access Network 

Mobile Ad hoc Network 

Mobile Application Part 

Multiband DFDM 

Message Center 

Multiple Carrier 

Mobile Country Code 

Multicarrier COMA 

Multicarrier DS-CDMA 

Mobile Controlled Handoff 

MultiCarrier Modulation 


Acronyms 


MCPS-SAP 
MCTD 
MExE 

MF 

MFR 
MFSK 
MGCF 


M-TCP 
MT-CDMA 
MTP3-B 
MUD 

MUI 
MWAN 


MAC Common Port Sublayer-Service Access Point 


Multi-Carrier Transmit Diversity 
Mobile Station Execution Environment 
MAC Frame 

MAC Footer 

M-ary Frequency Shift Keying 

Media Gateway Control Function 
Media Gateway 

MAC Header 

Multiple Inputs, Multiple Outputs 
Mobile Identification Number 
Mobile Internet Protocol 

Millions of Instructions Per Second 
Multiple Input, Single Output 
Maximum-Likelihood 

MAC Layer Management Entity-SAP 
Mobility Management 

MultiMedia Access Communication 
Multichannel Multipoint Distribution System 
MultiMedia Service 

Mobile Node 

Mobile Network Code 

Mean Opinion Score 

Minutes of Use 

MAC Protocol Data Unit 

Mobile Packet Gateway 

Multilevel Quadrature Amplititude Modulation 
Media Resource Function 

Mobile Station 

Mobile Switching Center 

MAC Service Data Unit 

Mobile Subscriber Identification Number 
Minimum Shift Keying 

Mobile Support Router 

Mobile Subscriber Roaming Number 
Maximum Segment Size 

Mobile Terminal 

Mobile TCP 

Multitone CDMA 

Message Transfer Part 3-B 
Multi-User Detection 

Multi-User Interference 

Mobile Wide-Area Network 
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Number Assignment Module 

Network Access layer Protocol 

Network Address and Port Translation 
Network Address Translation 

Network Allocation Vector 

Node B Application Part 

letwork Controlled Handoff 

etwork Element 

lational ISDN 

ational Institute of Standards and Technology 
etwork Layer 

on-Line-of-Sight 

etwork Management Center 

ational Mobile Subscriber Identity Number 
lordic Mobile Telephone 
etwork-to-Network Interface 

on-Return to Zero 

etworking and Switching Subsystem 
otification 


ZZZZZZZZZZZZZZZZZ 


Originating plus Incoming 

Object Exchange 

ODMA Common Control Channel 
Online Changing System 

Opportunity Driven Multiple Access 
ODMA Dedicated Control Channel 
ODMA Dedicated Channel 

ODMA Dedicated Traffic Channel 
Orthogonal Frequency Division Multiple access 
Open Mobile Alliance 

Operations and Maintenance Center 
Operational and Maintenance Subsystem 
Offset-Quadrature Phase Shift Keying 
Operations Systems 

Open System Interconnection 

Open Shortest Path First 

Orthogonal Transmit Diversity 
Orthogonal Variable Spreading Factor 


Acronyms 


Acronyms 
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Personal Access Communication System 
Packet Associated Control Channel 
Packet Assembler/Disassembler 
Packet Access Grant Channel 

Pulse Amplitude Modulation 
Personal Area Network 

Packet Broadcast Control Channel 
Point Coordinate 

Packet Control Function 

Paging Channel 

Paging Control Channel 

Packet Common Control Channel 
Primary Common Control Physical Channel 
Power Control Group 

Pulse Code Modulation 

Personal Communication Network 
Physical Common Packet Channel 
Primary Common Pilot Channel 
Personal Communications Services 
Packet Control Unit 

Personal Digital Assistants 
Personal Digital Cellular 

Packet Dedicated Control Channel 
Packet Data Channel 

Personal Digital Cellular-Packet 
Probability Density Function 
Packet Data Gateway 

Packet Data Network 

Packet Data Protocol 

Physical Downlink Shared Channel 
Packet Data Service Node 

Packet Data Traffic Channel 
Packet Data Unit 

Packet Error Rate 

Pretty Good Privacy 

Personal Handy Phone System 
Physical layer 

Page Indicator Channel 

Pilot Channel 

Point coordinates Inter-Frame Space 
Public Key Infrastructure 

Physical Layer Convergence Procedure 
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Phase-Locked Loop 

Physical Layer Management Entity 
Physical Layer Dependent Convergence Function 
Physical Layer Independent Convergence Function 
Public Land Mobile Network 

PLCP Length Word 

Physical Medium Dependent 

Pairwise Master Key 

Pseudo-random Noise 

Packet Paging Channel 

Packet Notification Channel 

Post Office Protocol 

Personal Operating Space 

PLCP Protocol Data Unit 

Point-to-Point Protocol 

Packet Random Access Channel 

Packet Reservation Multiple Access 
Programmable Read Only Memory 
Packet Switched 

Primary Synchronization Code 

Power Spectral Density 

PHY Service Data Unit 

PLCP Signaling Field 

Phase Shift Keying 

Pilot Strength Measurement Message 
Packet Switched Public Data Network 
Public Switched Telephone Network 
Packet Timing advance Control Channel 
Packet Traffic Channel 
Point-to-Multipoint 

Point-to-Point 

Post Telegraph and Telephone 

Personal Wireless Telecommunications-Enhanced 


Quadrature Amplitude Modulation 
Qualcomm Code-Excited Linear Predictive 


Acronyms 


Quaternary Offset Quadrature Amplitude Modulation 


Quality of Service 
Quick Paging Channel 
Quadrature Phase Shift Keying 


Acronyms 


801 


Receiver Address 

Radio Access Bearer 

Research in Advanced Communications Equipment 
Random Access Channel 

Reverse ACK Channel 

Remote Authentication Dial-In User Service 
Random Access Memory 

Radio Access Network 

Radio Access Network Application Part 
Random Number 

Reverse Address Resolution Protocol 
Remote Access Server 

Routing Area Update 

Radio Burst Protocol 

Rate Class 

Relaxed Code-Excited Linear Predictive 
Reverse Channel Quality 

Response 

Reduced Function Device 

Radio Frequency Identification 

Radio Link Control 

Radio Link Access Control 

Radio Link Protocol 

Radio Node 

Radio Network Controller 

Radio Network Control Plane 

Radio Network Layer 

Radio Network Subsystem 

Radio Network Subsystem Application Part 
Read Only Memory 

Remote Operation Service Element 
Regular Pulse Excited 

Radio Resource Control 

Route Reply 

Route Request 

Reverse Rate Indicator 

Reed-Solomon 

Rivet-Shamir-Adelman 

Radio Station Subsystem 

Radio Signal Strength 

Reed-Solomon Viterbi 


802 


Acronyms 


Round Trip Time-Out 

Request to Send 

Radio Transmission Technology 
Receiver 


Slave 

Source Address 

Signaling Asynchronous transfer mode Adaptation Layer 
Selective Acknowledgment 

Slow Associated Control Channel 
Service Access Point 

Service Access Point Identity 

Sequential Assignment Routing 
Specifies Application Service Element 
Sub-Band Coding 

Single Carrier 

Supplementary Code Channel 

Signaling Connection Control Part 
Secondary Common Control Physical Channel 
Synchronization Channel 

Secondary Channel 

Synchronous Connection Oriented 
Stream Control Protocol 

Secondary Common Pilot Channel 
Simple Control Transmission Protocol 
Stand-alone Dedicated Control Channel 
Space Division Multiplexing 

Service Discovery Protocol 

Software Defined Radio 

Service Data Unit 

Spreading Factor 

Start of Frame Delimiter 

Standard Generalized Markup Language 
Serving GPRS Support Node 

Short Inter-Frame Space 

Special Interest Group 

Subscriber Identity Module 

Single Input, Multiple Output 
Signal-to-Interference-plus-Noise Ratio 
Session Initiated Protocol 
Signal-to-Interference Ratio 


Acronyms 803 


SISO Soft Input, Soft Output 

SM Service Management 

SMACS Self-organized Media Access Control for Sensor network 
SMECN Small Minimum Energy Communication Network 
SMP Sensor Management Protocol 

SMS Short Message Service 

SMTP Simple Mail Transport Protocol 

SNDCP Sub-network Dependent Convergence Protocol 
SNR Signal-to-Noise Ratio 

SOHO Small Office Home Office 

SOVA Soft Output Viterbi Algorithm 

SPIN Sensor Protocol for Information via Negotiation 
SQDDP Sensor Query and Data Dissemination Protocol 
SR Spreading Rate 

SRBP Signaling Radio Burst Protocol 

SRES Signature Response 

SRLP Signaling Radio Link Protocol 

SRNC Serving RNC 

SRNS Serving RNS 

SRP Selective Repeat Protocol 

SS Spread Spectrum 

SS7 Signaling System 7 

SSC Secondary Synchronization Code 

SSCF Service-Specific Coordinating Function 

SSCS Service Specific Convergence Sublayer 

SSCOP Service-Specific Connection Oriented Protocol 
SSD Shared Secret Data 

SSID Service Set Identifier 

SSL Secure Socket Layer 

SSP Sevice-Signaling Point 

ST Short Term 

STD Silence Descriptor 

SYNCH Sync Channel 

T 

T Transparent 

TA Terminal Adaptor 

TACS Total Access Communication System 

TACAS Terminal Access Controller Access control System 
TADAP Task Assignment and Data Advertisement Protocol 
TAG Technical Ad hoc Group 


TB Transport Block 
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TCH 
TCH/F 
TCH/H 
TCM 
TCP 
TCS 
TCS-1 
TDD 
TDM 
TDMA 
TDPICH 
TD-SCDMA 
TeleVAS 
TEI 
TFCI 
THSS 
TIA 
TKIP 
TLLI 
TLS 
TMSI 
TNCP 


Acronyms 


Traffic Channel 

Traffic Channel/Full 

Traffic Channel/Half 

Trellis Coded Modulation 
Transmission Control Protocol 
Telephone Control Specification 
Telephone Control Channel-1 

Time Division Duplex 

Time Division Multiplexing 

Time Division Multiple Access 
Transmit Diversity Pilot Channel 
Time Division-Synchronous СОМА 
Telephony Value-Added Service 
Terminal Equipment Identity 
Transport Format Combination Indicator 
Time-Hop Spread Spectrum 
Telecommunication Industries Association 
Temporal Key Integrity Protocol 
Temporary Logical Link Identifier 
Transport Layer Security 

Temporary Mobile Subscriber Identity 
Transport Network Control Plane 
Transport Network Layer 

Temporally Ordered Routing Algorithm 
Type of Service 

Transmit Power Control 

Transport Protocol Class 4 
Transponder Rate Adapter Unit 

Time Slot 

Time Slot Transfer 

Transmission Time Interval 
Time-to-Live 

Traffic Termination Point 

Transmitter 


UMTS Core Network 

Unrestricted Digital Information 

User Datagram Protocol 

User Equipment 

Ultra High Frequency 

Universal Mobile Telecommunications Services 


Acronyms 
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Unlicensed-National Information Infrastructure 
Uplink 

User Plane 

UMTS Radio Access Network 

Uniform Resource Identifier 

Uniform Resource Locator 

Uplink State Flag 

UMTS SIM 

Unstructured Supplementary Service Data 
UMTS Terrestrial Radio Access 

UMTS Terrestrial Radio Access Network 
Ultra WideBand 


Universal Wireless Communication Consortium 


Viterbi 

Voice Activity Detector 

Virtual Circuit 

Visitor Location Register 

Very Large System Integration 
Voice Mail 

Variance-to-Mean Ratio 

Vector Orthogonal Frequency Division Multiple-access 
Voice-over IP 

Virtual Private Network 

Vector Self-Excited Linear Predictor 


Wireless Access Communication System 
Wireless Application Environment 
WLAN Adaptation Function 

WLAN Access Gateway 

Wide-area Network 

Wireless Application Protocol 

Wireless Application Protocol Cascading Style Sheet 
WLAN-Access Point Name 

Wideband CDMA 

Wireless Control Message Protocol 
Wireless Datagram Protocol 

Wired Equivalent Privacy 

Wireless Interworking Group 
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XHTML MP 
XML 
XRES 


2 
ZF 


Acronyms 


Worldwide interoperability for Microwave Access 
Wireless Intelligent Networking 

Wireless Local Area Network 

Wireless Local Loop 

Wireless Metropolitan Area Network 

Wireless Markup Language 

Wi-Fi Protected Access 

Wireless Personal Area Network 

Wireless Point of Sale 

Window-control Operation based on Reception Memory 
Wireless Routing Protocol 

Wireless Service Provider 

Wireless Session Protocol 

Wireless Telephony Application 

Wireless Telephony Application Interface 
Wireless Transport Layer Security 

Wireless Transaction Protocol 

Wireless Wide-Area Network 

World Wide Web 


Extensible HTML Mobile Profile 
Extensible Mark-up Language 
Expected Response 


Zero-Forcing 


Index 


AAA, see Authentication, autho- 
rizing, and accounting 


ABS, see Answer-busy ratio 


ABS/BH, see Average busy 
season per busy hour 


Access grant channel, 201 


Access link control application 
part, 509-510 


ACCH, see Associated control 
channel 


ACI, see Adjacent channel 
interference 


Acronyms, listing, 787-806 


Adaptive differential pulse code 
modulation, 101 


Adaptive multiple rate, speech 
codec, 224-225, 227 


Additive white Gaussian noise, 
102 


Address resolution protocol, 
435, 442 


Adjacent channel interference, 
144 


Advanced Mobile Phone System 
historical perspective, 2 
security, 408, 430 

AGCH, see Access grant channel 

ALCAP, see Access link control 

application part 


Algebraic codebook excited lin- 
ear prediction, 222-223 


Aliasing, sampling, 91-93 
ALOHA 
overview, 149-150, 176-177 
slotted ALOHA, 176-177 


AMPS, see Advanced Mobile 
Phone System 


AMR, see Adaptive multiple rate 
Angle diversity, 302 


ANSI-41, authentication stan- 
dard, 411-415 


Answer-busy ratio, definition, 34 


Answer-seizure ratio, definition, 


34 
Antenna 
bandwidth, 294 
combiners 
function, 302—303 


performance comparisons, 
310-311 


types, 303-310 
directivity, 294, 296-297 
diversity 
overview, 300-301 
types, 301-302 
front-to-back ratio, 294-295 
front-to-side ratio, 294, 296 
function, 85 
gain, 288-294, 297-298 
helical antennas, 298-300 
input impedance, 294 
intermodulation, 294 
link budget, 312-314 
lobes, 295 
patterns, 288, 294 
performance criteria, 293-294 
polarization, 294 
power dissipation, 294 
radiation efficiency, 294 
Rake receiver, 310-312 
types, 287-288 
Antipodal baseband signaling, 
256-257 
APBBS, see Antipodal baseband 
signaling 
Aperture effect, pulse amplitude 
modulation, 98 
ARP, see Address resolution 
protocol 
ARQ, see Automatic repeat 
request 


ASR, see Answer-seizure ratio 
Associated control channel, 201 


Asynchronous communication, 
113 


Asynchronous connectionless 
link, Bluetooth, 663-665 


Attenuation distortion, 118 
Authentication 
air interface support, 429 
Bluetooth, 666-668 
protocols, 427-428 


Authentication, authorizing, and 
accounting, 428-429 


Authentication key, 412 
Automatic repeat request 
Bluetooth, 670-671 
error control, 185-188, 234 


Average busy season per busy 
hour, calculation, 37-38 


Average fade duration, calcula- 
tion, 65 

AWGN, see Additive white 
Gaussian noise 


Bandwidth, antenna, 294 


Bandwidth efficiency, definition, 
106 


Bandwidth-limited channel, 108 


Bandwidth-limited system, 
109-110 


Base station controller, general 
packet radio service, 475 


Base station subsystem, general 
packet radio service, 
475-476 


Baseband signal, definition, 87 
BCC, see Blocked call cleared 


BCCH, see Broadcast control 
channel 


BCD, see Blocked call delayed 
BCH, see Blocked call held 
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Index 


BCH, see Broadcast channel 
BeamReach, features, 14 
Bearer services, 210 

BER, see Bit-error-rate 


Bernoulli distribution, smooth 
traffic, 39 


BH, see Busy hour 


BHCA, see Busy hour call 
attempts 


Binary phase shift keying 


direct sequence spread spec- 
trum systems, 335-337 


modulation, 257-260 
Binary system, definition, 87 


Binomial formula, assumptions 
and use, 42-43 


Bit-error-rate, 60, 107, 110-111, 
602 


Bit scrambling, spread spectrum 
systems, 339-341 


Bit stream, definition, 87 
Block codes, 234 

Blocked call cleared, 39—40 
Blocked call delayed, 39-40 
Blocked call held, 39—40 


Bluetooth, see Wireless personal 
area network 


BPSK, see Binary phase shift 
keying 

Broadcast channel, 199 

Broadcast control channel, 199 

BSC, see Base station controller 

BSS, see Base station subsystem 

Busy hour, definition, 25 


Busy hour call attempts, calcula- 
tion, 29-30 


Call arrival rate, calculation, 
28-29 


Call capacity 
component view, 30-31 
global view, 30 
Call holding time, definition, 24 
Calling rate, definition, 24 


Call mixes, traffic environment, 
31-32 


Carrier sense multiple access 
collision avoidance, 181-184 
collision detection, 180-181 
contention window, 183 


distributed inter-frame space, 
184 


normalized throughput calcu- 
lations, 179-180 
types, 178-179 
CAVE, see Cellular authentica- 
tion and voice encryp- 
tion, 411-412 
CBCH, see Cell broadcast 
channel 


CCCH, see Common control 
channel 


CCH, see Control channel 


ССМР, see Counter-mode/ 
block chaining message 
authentication code 
protocol 

CCS, see Centrum call seconds 


CDMA, see Code Division 
Multiple Access 


cdmaOne 
downlink channels, 348-351 


evolution to cdma2000, 
568-574 


overview, 347-348 
uplink channel, 351, 353-356 
cdma2000 


evolution, 491, 541-544, 
568-574 


forward link channels 


modulation and spreading, 
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165-166 


Frequency-hopping spread 

spectrum 

chip number, 332 

hopping bandwidth, 332-333 
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Quantizer, saturation, 94 


Quaternary system, definition, 
87 


RACH, see Random access 
channel 


Radiation efficiency, antenna, 
294 


Radio frequency identification, 
707-710 


Radio link control 
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CHAPTER 22 


Interworking between Wireless 
Local Area Networks and 
3G Wireless Wide Area Networks 


22.1 Introduction 

Wireless local area networks (WLANs) are subjected to interference because of 
their operation in the unlicensed spectrum. WLANS' coverage ranges from about 
30 to 300 m. Therefore, they are suitable only in high-density areas and thus not 
able to provide ubiquitous coverage. WLAN technology is relatively inexpensive 
and quick to deploy. Although WLANS were originally designed to extend LANs 
in corporate environments, they are becoming increasingly popular to provide IP 
connectivity in residential, small office home office (SOHO), and campus environ- 
ments. A new phenomenon in populated areas has emerged to deploy WLANs in 
public hotspots including airports, coffee houses, convention centers, hotels, and 
other public areas with a high demand for wireless data. 

Both WLANs and 3G are capable of providing higher-speed wireless 
connections that cannot be offered by earlier 2G cellular technologies. Therefore, 
they seem to compete. However, each technology has niche market applications. 
WLANs can cover only a small area and allow limited mobility, but provide higher 
data rates. Therefore, WLANs are well suited to hotspot coverage where there is a 
high density of demand for high-data-rate wireless services requiring limited mobil- 
ity. On the other hand, 3G wireless networks, with their well-established voice 
support, wide coverage, and high mobility, are more suited to areas with moder- 
ate or low-density demand for wireless usage requiring high mobility. Therefore, 
WLANs and 3G are complementary. The integration of 3G wireless апа WLANs 
is highly significant to make wireless multimedia and other high-data-rate services 
a reality for a large population. A multimedia 3G/WLAN terminal can access high- 
bandwidth data services where WLAN coverage is offered, while accessing wide 
area networks using 3G at other places. However, this approach alone will only 
allow limited multi-access functionality. To make multi-access solutions effective, 
we need an integrated solution to provide seamless mobility between access tech- 
nologies, allowing continuity of existing sessions. 3G/WLAN integration promises 
to offer these capabilities seamlessly [1,2,11—13]. 


22-1 


22-2 22 Interworking between Local Area Networks and 3G Wide Area Networks 


In the standard arena, work is going on both in the 3G partnership project 
(3GPP) and 3GPP2 on 3G/WLAN integration. 3GPP has specified an interwork- 
ing architecture that enables users to access their 2G and 3G data services from 
WLANs. 3GPP2 has been initiated to examine the issues of 3G/WLAN interwork- 
ing. They are finalizing stage 1 specifications of the interworking system and in 
the near future will start the architectural activities. 

Several WLAN standardization organizations (in particular ETSI BRAN, 
IEEE 802.11, IEEE 802.15 and multimedia access communication (MMAC)) 
have agreed to set up a joint wireless interworking group (WIG) to deal with the 
interworking between WLANs and cellular networks. This activity is being driven 
primarily from Europe by ETSI BRAN. 

In this chapter we focus on interworking issues of WLANs and wireless 
wide-area networks (WWANSs). We also discuss the local multipoint distribution 
system (LMDS) and the multichannel multipoint distribution system (MMDS). 


22.2 Interworking Objectives and Requirements 
One of the principal objectives of interworking is to allow independent evolution 
of 3GPP (WWAN) and WLAN standards. The extent of interdependence between 
these standards should be minimized or localized at the point of interconnection. 

Support for the legacy WLAN user is perhaps the most important objec- 
tive of a 3GPP-WLAN interworking setup. A legacy WLAN user is a user with a 
WLAN-capable device and a subscription to 3GPP services. The user may or may 
not be 3GPP capable. Such a user should be able to access 3GPP services without 
substantial hardware/software upgrades. Such a setup would result in a strong 
business case, leading to extend the facility of 3GPP services to the user who, 
although having a 3GPP subscription, does not want to spend it on additional 
hardware/software upgrades. The other objective of interworking is the single 
subscription. 

The following are the interworking requirements: 


* Common billing and customer care. This is the simplest form of interworking 
that provides a common bill and customer care to the subscriber but oth- 
erwise requires no real interworking between the WLAN and 3GPP data 
networks. 


3GPP-based access control and charging. This requires authentication, 
authorization, and accounting (AAA) for subscribers in the WLAN to be 
based on the same AAA procedures used in the 3GPP data networks. It 
means a mobile subscriber can use his or her subscriber identity module/ 
UMTS-SIM (SIM/USIM) to access WLAN services. 


Access to 3GPP-based packet switched services. The aim of this requirement 
is to allow the mobile operator to allow access to its 3GPP data services to 
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subscribers in a WLAN environment. It means a mobile subscriber should be 
able to access/select 3GPP data services through the WLAN access network. 
Although the user is allowed access to the same 3GPP data services over 
both the 3GPP and WLAN access networks, no service continuity across 
these access networks is required in this scenario. 


* Service continuity. The goal is to allow seamless service continuity across 
the 3GPP and WLAN systems. It means that a user session during mobility 
across these networks should not only continue but also should not have 
noticeable service change in terms of quality and disruption. 


* Access to 3GPP circuit-switched services. The goal of this requirement is to 
allow the 3GPP operator to offer access to circuit-switched services such as 
voice calls from the WLAN systems. Seamless service continuity is a must 
for these services. 


22.3 Interworking Schemes to Connect WLANs апа 
3G Networks 


Based on the objectives and requirements discussed in the previous section, we 
present interworking schemes to connect WLANs and 3GPP networks [5-10]. 

Basically, interworking schemes can be categorized as mobile IP approach, 
gateway approach, and emulator approach. Mobile IP approach (called loose cou- 
pling approach), introduces mobile IP to two networks. Mobile IP mechanisms 
can be implemented in the mobile nodes and installed on the network devices of 
3G and WLANs. This approach provides IP mobility for roaming between 3G 
and WLANs. However, this approach requires installing mobile IP devices such 
as a home agent (HA) and a foreign agent (FA) in both networks, and terminal 
devices should also implement mobile IP features. Since the user device requires 
sending the registration back to its home network, packet delay and loss are also 
a problem for handoffs. Moreover, this approach suffers from the triangular 
routing between networks if mobile IP does not support route optimization (see 
Figure 22.1). 

The gateway approach introduces a new logical node to connect two wireless 
networks. The new node is located between the two networks and acts as an 
internal device. It exchanges necessary information between the two networks, 
converts signals, and forwards the packets for the roaming users. This approach 
aims to separate the operations of two networks, which implies the two networks 
are peer-to-peer networks and can handle their subscriber independently. With the 
two network operators having a roaming agreement, the logical node helps two 
networks offer intersystem roaming. The advantages of this approach are that 
the two networks can be operated independently; packets for roaming users go 
through the node without processing by mobile IP; and handoff delay and loss can 
be reduced (see Figure 22.2). 
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Figure 22.1 Architecture of the mobile IP approach. 
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Figure 22.2 Architecture of the gateway approach. 


The emulator approach (called tight coupling approach), uses WLAN as an 
access stratum in a 3G network. This approach replaces 3G access stratum by 
WLAN layer one and layer two. A WLAN access point (AP) can be viewed as a 
3G network controller or a serving GPRS support node (SGSN). The benefit of 
this approach is that mobile IP is not required. All packet routing and forward- 
ing are processed by a 3GPP core network. The packet loss and delay can be 
reduced significantly. However, this approach lacks flexibility since two networks 
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Figure 22.3 Architecture of the emulator approach. 


are tightly coupled. The operators of two networks should be the same in order 
to exchange much information. Another disadvantage of this approach is that the 
gateway GPRS support node (GGSN) will be the single point to the Internet. AII 
packets have to go through the GGSN first. GGSN and the core network become 
the bottleneck (see Figure 22.3). 


22.4 De Facto WLAN System Architecture 
3GPP WLAN interworking architecture design work is focused on the interworking 
functionality between 3GPP and WLAN systems. To achieve a 3GPP-WLAN 
interworking architecture that is widely adopted, it is imperative to use the exist- 
ing de facto WLAN access equipment. Unlike the 3GPP system architecture, there 
is no existing formal standard for a WLAN access network architecture or for a 
typical public access WLAN system. The WLAN system shown in Figure 22.4 
enables IP connectivity between the WLAN terminal and IP networks over its 
WLAN interface. A dynamic host configuration protocol (DHCP) server is needed 
to facilitate configuration of the WLAN terminal’s IP stack. A domain name server 
(DNS) resolves Internet fully qualified domain name (FQDN) addresses into IP 
addresses. A Gateway (GW)/network address and port translation (NAPT) is a 
gateway toward external IP networks such as the Internet. The GW usually also 
performs IP network address and port translations to enable the WLAN access 
network operator to use private-space IP addresses inside the WLAN system and 
enable access to services available outside IP networks at the same time. 

An hyper text transfer protocol (HTTP) server may offer local application- 
level service for accessing users. Accounting data is processed in the billing system 
server. The local services server is a general box covering services at IP level or 
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above, such as mail servers and local web content. Network management takes 
care of the management of all network elements at all layers. It is instrumental in 
network configuration and monitoring. 

The WLAN terminal is typically a laptop computer or a personal digital 
assistant (PDA) with a built-in WLAN module or a PCMCIA WLAN card. The 
WLAN AP is mostly a layer 2 bridge between IEEE 802.11 and the Ethernet. The 
AP can also support IEEE 802.11i/802.1X functionality, in which case it is also 
a remote authentication dial-in user service (RADIUS) client toward the fixed 
network and performs radio link encryption toward the WLAN terminal. Access 
points are attached to layer 2 distribution networks such as a switched Ethernet 
subnet. The layer 2 distribution network may also provide intra-subnet mobility 
for WLAN terminals. The layer 2 distribution network enables layer 2 connectiv- 
ity toward the first IP routing device, the access router (AR). The basic function 
of AR is to route user IP packets. 

Authentication and authorization is one basic prerequisite for providing IP 
connectivity and other services via a WLAN system. To realize these functions, 
an authentication, authorization, and accounting (AAA) server and user database 
are required. An AAA server is typically the RADIUS server used for a WLAN 
system. The subscribers’ user identities such as login names, shared secrets like 
passwords, and user profiles are stored in the database. The database is accessed 
from the AAA server over the IP backbone network using lightweight directory 
access protocol (LDAP) as the de facto standard. 

Legacy authentication and authorization is performed using Web browsers. 
When the user initiates Web browser, its first request is redirected into a WLAN 
system HTTP server and a landing Web page is displayed. The user is prompted 
to enter a login name and password. The password can be static, limited time, or 
even generated ad hoc (using, e.g., Security ID technology). Similarly, users can be 
prompted to enter their credit card number and pay for the connection without 
establishing a more lasting relationship with the WLAN system operator. 

It is also possible to establish a roaming relationship between WLAN sys- 
tems. Roaming enables a user of a WLAN system to connect to another WLAN 
system. In this case, the AAA functions are still provided by the user’s own WLAN 
system, while actual WLAN access is provided by other WLAN systems. 


22.5 Session Mobility 


Session mobility may be seen as an evolutionary step from roaming in the integrated 
environment. Session is defined as a flow of IP packets between the end-user and 
an external entity; for example, an FTP or HTTP session. We consider a mobile 
device capable of connecting to the data network through WLANs and 3GPP 
networks. This could be a laptop with an integrated WLAN-general packet radio 
service (GPRS) card, or PDA attached to a dual access card. The end-user is con- 
nected to the data network and is in a session flow through one access network, 
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say, a WLAN. As the user moves out of the coverage area of the WLAN, the end 
device detects the failing WLAN coverage and seamlessly switches the flow to 
the 3GPP network. The end-to-end session remains unaffected. Typically no user 
intervention would be required to perform the switchover from WLAN to 3GPP. 
When the user moves back into the coverage of the WLAN system, the flow is 
handed back to the WLAN. 


22.6 Interworking Architectures for WLAN and GPRS 

In this section, we elaborate on the ETSI specified, two generic approaches for 
interworking — tight coupling and loose coupling. With tight coupling the WLAN 
is connected to the 3GPP (GPRS) core network in the same way as any other 
radio access network (RAN), such as GPRS RAN and UMTS terrestrial RAN 
(UTRAN). In this case, the WLAN data traffic goes through the GPRS core net- 
work before reaching the external packet data networks. With tight coupling, 
the WLAN is connected to either Gp or I,-ps reference points. On the other hand, 
with loose coupling, the WLAN is deployed as an access network complementary 
to the GPRS network. In this case, the WLAN utilizes the subscriber databases 
in the GPRS network but features no data interfaces to the GPRS core network. 
Figure 22.5 shows the GPRS reference diagram for coupling points. The loose 
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Figure 22.5 A GPRS reference diagram with WLAN coupling points. 
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coupling architecture between the GPRS and the WLAN at the G; reference point 
is indicated. This means that with loose coupling, the WLAN bypasses the GPRS 
network and provides direct network data access to the external packet data 
networks (PDNs). 

The trend is to follow the loose coupling approach and use SIM or USIM- 
based authentication and billing. With this approach, a subscriber can reuse 
the SIM card or the USIM card to access a set of wireless data services over a 
WLAN. 

In the tight coupling approach, 3GPP system-based access control and charging 
is used. This requires AAA for subscribers in the WLAN to be based on the same 
AAA procedures used in the GPRS system. An access to 3GPP GPRS-based services 
is used to allow the cellular operator to extend access to its GPRS-based services to 
subscribers in a WLAN environment. Also, seamless services scenarios provides 
seamless service continuity between GPRS and WLAN. The goal of 3GPP circuit- 
switched services is to allow the operator to offer access to circuit-switched services 
(e.g., normal voice calls) from a WLAN system. Seamless mobility for these services 
is provided. The advantages of tight coupling architecture between IEEE 802.11 
WLANs and GPRS are the following: 


Seamless service continuation across WLAN and GPRS. The users are able 
to maintain their data sessions as they move from WLAN to GPRS and 
vice versa. For services with tight coupling quality of service (QoS) require- 
ments, seamless service continuation is subject to WLAN QoS capabilities. 


Reuse of GPRS AAA 


Reuse of GPRS infrastructure (e.g., core network resources, subscriber data- 
bases, billing systems) and protection of cellular operator's investment 


Support of lawful interception for WLAN subscribers 


Increased security, since GPRS authentication and ciphering can be used on 
top of WLAN ciphering 


Common provisioning and customer care 


* Access to core GPRS services such as short message service (SMS), location- 
based services and multimedia messaging services (MMS) 


22.7 System Description with Tight Coupling 

Figure 22.6 shows the system architecture with tight coupling. A WLAN is 
deployed with one or more off-the-shelf access points, which are connected by 
means of a distribution system. The distribution system is LAN-compliant with 
IEEE 802.3. The WLAN is deployed in an infrastructure configuration, that is, 
APs behave like base stations, and mobiles exchange data only with APs. The 
service area of an AP is called a basic service set. Each WLAN is typically composed 
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Figure 22.6 WLAN-GPRS integration with tight coupling system configuration. 
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of many basic service sets, which all together form an extended service set (ESS) 
(see Chapter 21). 

The WLAN network is deployed as an alternative RAN and connects to the 
GPRS core network through the standard Ср interface. From the core network 
point of view, the WLAN is considered as other GPRS routing areas (RAs) in the 
system. The GPRS core network does not identify the difference between an RA 
with WLAN radio technology and one with GPRS radio technology. 

The key functional element in the system is the GPRS interworking function 
(GIF), which is connected to a distribution system and to an SGSN via the stan- 
dard Gy interface. The main function of the GIF is to provide a standardized 
interface to the GPRS core network and to virtually hide the WLAN particulari- 
ties. The GIF is the function that makes the SGSN consider the WLAN a typical 
routing area. 

The existing GPRS protocols in mobile are fully reused. The LLC, subnet- 
work dependent convergence protocol (SNDCP), GPRS mobility management 
(GMM), and session management are used in both a standard GPRS cell and a 
WLAN area. Therefore, the WLAN merely provides a new radio transport for 
these protocols. 

When a mobile station (MS) is outside the WLAN area, its WLAN interface 
is in passive scan mode, that is, it scans a specific frequency band and searches 
for a beacon signal. When a beacon is received the service set identifier (SSID) 
is checked and compared against a pre-configured SSID. The SSID serves as a 
WLAN identifier and can help mobiles attach to the correct WLAN. For example, 
an operator could use a unique SSID and request that its subscribers configure 
their mobiles to consider only this SSID valid. 

When an MS detects a valid SSID, it performs the typical authentication and 
association procedures. It then enables its WLAN interface, and further signaling 
is carried over this interface. 

Mobile stations are dual mode, that is, they support both GPRS and WLAN 
access in a seamless fashion. System mobility is achieved by means of the routing 
area update (RAU) procedure, which is the core mobility management procedure 
in GPRS. Typically, when a mobile enters a WLAN area, an RAU procedure takes 
place, and subsequent GPRS signaling and user data transmission are carried over 
the WLAN interface. Similarly, when the mobile exits a WLAN area, another 
RAU procedure takes place, and the GPRS interface is enabled and used to carry 
further data and signaling traffic. From the core network point of view, handoff 
between WLAN and GPRS is considered handoff between two individual cells. 

Mobile stations in the WLAN send uplink GPRS traffic to the MAC address 
of GIF; similarly, downlink GPRS traffic is sent from the GIF to the MAC addresses 
of mobile stations (see Figure 22.6). The MS has two radio subsystems, one for 
GPRS access and another for WLAN access (refer to Figure 22.7). The WLAN 
adaptation function (WAF) identifies when the WLAN radio subsystem is enabled 
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Figure 22.7 Tight coupling over б interface: a reference diagram. 


(i.e., when the MS associates with a valid AP) and informs the LLC layer, which 
subsequently redirects signaling and data traffic to the WLAN. Note that all stan- 
dard GPRS protocols operating on top of the LLC (SNDCP, GMM, SM) function 
as usual and do not identify which radio subsystem is used. WAF is a key compo- 
nent in a mobile station. 


22.7.1 Protocol Stack 

The MS supports two radio subsystems (or interfaces) for transporting GPRS 
signaling and user data (see Figure 22.8). The first interface is implemented with 
the GPRS-specific radio link control (RLC)/MAC and physical layers, whereas the 
second interface is implemented with 802.11-specific MAC and physical layers. 
These two interfaces provide two alternative means for transporting LLC packet 
data units (PDUs). Typically, when the MS is outside a WLAN area, LLC PDUs 
are transmitted over the GPRS interface (U,,,). However, when the mobile enters а 
WLAN area, LLC PDUs are transmitted over the WLAN interface. This switching 
is performed with the help of WAF and could be completely transparent to the 
user and to the upper GPRS layers. 

The WAF operates in both MS and GIF. It provides an adaptation function 
for interworking between LLC and 802.11 MAC (in the mobile) and between 
802.3 MAC and BSSGP (in GIF). The GIF also implements the GPRS proto- 
cols specified on С» interface, frame relay (FR), network service (NS), and base 
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Figure 22.8 Protocol stack for tight coupling over Gp interface. 


station subsystem GPRS protocol (BSSGP). The AP implements the 802.11 
and 802.3 protocols and a simple interworking function that provides bridging 
between them. 


22.7.2 WLAN Adaptation Function 

The WAF is implemented in every dual mode MS and in the GIF. It supports the 
appropriate interworking functions. With the aid of WAF it becomes feasible to 
transport GPRS signaling and data over 802.11 WLANs. The WAF provides the 
following functions: 


* It signals the activation of the WLAN interface when a mobile enters a 
WLAN area. It also signals the change of RA to GMM when a mobile 
enters a WLAN area and gets associated with an AP. 

* It supports the GIF/RAI discovery procedure, which is initiated by MSs in order 
to discover the MAC address of GIF and the RA identity (RAI) of the WLAN. 
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e [t supports the paging procedure on Gp, used when SGSN needs to page an 
MS. During this procedure, WAF sends an appropriate signaling message to 
MS in order to alert it and respond to page. 


* [t transfers uplink LLC PDUs from MS to the GIF by using the transport 
services provided by the 802.11 MAC. It also transfers downlink LLC PDUs 
from the GIF and in the MS. 


* It supports QoS by implementing transmission scheduling in the GIF and 
in the MS. 


* [t transfers the temporary logical link identifier (TLLI) and QoS informa- 
tion in the WAF header. The TLLI is a temporary MS identifier used by the 
LLC layer for addressing purposes. 


The encapsulation scheme used in the uplink direction as well as the format 
of a WAF PDU are shown in Figure 22.9. Each LLC PDU is encapsulated into 
a WAF PDU, which includes the TLLI and QoS in the header. The TLLI is used 
by the GIF to update an internal mapping table that correlates TLLIs with 802 
MAC addresses. In order to support the paging procedure, the GIF also needs to 
correlate IMSIs with 802 MAC addresses. The correlation between TLLIs and 802 
MAC addresses is used for forwarding downlink LLC PDUs received on the Gp 
interface to the correct mobile on the WLAN. Note that the SGSN uses the TLLT 
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Figure 22.9 The encapsulation scheme. 
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on Ср as address information, whereas the WLAN uses 802 MAC addresses. In 
the uplink direction, QoS contains the following attributes: 


* Peak throughput 
* Radio priority 
* RLC mode 


These QoS attributes are primarily used for scheduling in the MS and GIF. In 
the downlink direction, the QoS may be empty, since there is no need to transfer 
any QoS parameters to the mobile. The 802.11 and 802.3 MAC headers (see 
Figure 22.8) are the standard headers specified by the 802.11 and 802.3 stan- 
dards, respectively. 


22.7.3 GIF/RAI Discovery Procedure 

GIF/RAI discovery is a key procedure carried out immediately after an MS enters 
an 802.11 WLAN area and gets associated with an AP. The WAF in the MS initi- 
ates this procedure: 


* To discover the 802 MAC address of GIF. All uplink LLC PDUs are subse- 
quently transmitted to this MAC address. 


* To discover the RAI that corresponds to the WLAN network. 


* To send the MS’s IMSI value to GIF This value is subsequently used by the 
GIF to support the GPRS paging procedure. By knowing the IMSI of a par- 
ticular MS, GIF can forward subsequent paging messages from the SGSN. 


Figure 22.10 shows the signaling flow during the GAF/RAI procedure. The 
procedure is initiated after the 802.11 MAC layer is enabled (i.e., after the mobile 
gets associated with a particular AP). The WAF layer in an MS sends a request to 
802.11 MAC to transmit a PDU with a source address (SA) equal to MS’s MAC 
address and a destination address equal to broadcast. This PDU is a GIF/RAI dis- 
cover request message that includes the IMSI value of the MS. The 802.11 MAC 
layer transmits an 802.11 MAC PDU with the appropriate address information 
(designated Addr1, Addr2, Addr3). Note that this PDU is directed to the AP with 
identity BSSID. The AP broadcasts this message to the MS and is finally received 
by the GIF, which associates the IMSI with the MS's 802.11 MAC address (desig- 
nated MS). Subsequently, the WAF in the GIF responds with a GIF/RAI discover 
response that includes the RAI of the WLAN. The MS receives this response, 
stores the GIF address and the RAI, and notifies the GMM layer that the current 
GPRS RA has changed. In response, the GMM layer initiates the normal GPRS 
RAU procedure and notifies the SGSN that the MS has changed RA. After that, 
normal GPRS data and signaling is performed over the WLAN. 

It should be noted that, with the aid of WAF, MSs can seamlessly move 
between WLAN and GPRS radio access and use the normal GPRS procedures for 
mobility management. 
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Figure 22.10 Signaling flow during a GIF/RAI discovery procedure. 
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22.8 System Description with Loose Coupling 

Figure 22.11 shows the system architecture with loose coupling. The WLAN is 
coupled with the GPRS network in the operator’s IP network. Note that, in con- 
trast to tight coupling, the WLAN data traffic does not pass through the GPRS 
core network but goes directly to the operator’s IP network. In this architecture, 
SIM-based authentication can be supported in both the GPRS network and the 
WLAN to gain access to the operator’s services. The architecture also supports 
integrated billing, via the billing mediator, in a common billing system. The 
WLAN may be owned by a third party, with roaming/mobility enabled via a dedi- 
cated connection between the operator and the WLAN, or over an existing public 
network, such as the Internet. 

Loose coupling utilizes standard IETF-based protocols for authentication, 
accounting, and mobility. Roaming can be enabled across all types of WLAN imple- 
mentations, regardless of who owns the WLAN, solely via roaming agreements. 

The WLAN access network connects to the GPRS data network like a 
different type of radio access network for interworking. This allows for the sup- 
port of the legacy WLAN access networks, which commonly support RADIUS/ 
DIAMETER protocols in the WLAN access network. This approach defines some 
new interfaces with well-defined functions and commonly used protocols. The 
new interfaces are discussed below (see Figure 22.17). 


• W/W, interface. This interface connects the WLAN access network with the 
visited 3GPP data network or the home 3GPP data network. The W, interface 
transports authentication, authorization, and other related information. The 
W interface transports charging related information. The W, interface logi- 
cally connects the WLAN capable user to the AAA server, which resides in the 
cellular operator home network. The WLAN capable user is authenticated 
and authorized by the AAA server. The WLAN related subscription informa- 
tion for the user are stored in home location register/home subscriber server 
(HLR/HSS). The extensible authentication protocol (EAP) is used for this pur- 
pose between the WLAN capable user and the AAA server. To accommodate 
the existing WLAN access networks, which support RADIUS or DIAMETER, 
the W,/W/ interface uses DIAMETER protocol toward the AAA server. The 
principle of authentication is mutual authentication. Two methods of mutual 
authentication are currently defined, EAP/SIM and EAP/AKA. The EAP/AKA 
is used for subscribers with USIM and EAP/SIM is used for subscribers with 
SIM. The existing SIM subscribers’ authentication in cellular networks is not 
based on mutual authentication. This is the reason that the authentication 
methods are different for SIM- and USIM-based WLAN users. 


W, interface. This interface transports tunneled WLAN user data toward the 
packet data gateway in the home network and vice versa. The W,, interface 
is used to transport tunneled data between the home packet data gateway in 
the home network and the visited data border gateway in the visited network 
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Figure 22.11 WLAN-GPRS integration using loose coupling. 
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if the WLAN access network is not directly connected to the home network. 
It is also possible that the packet data is directly routed by the WLAN access 
network to the external IP network. This is the reason that this interface is ser- 
vice specific. If the packet data is routed by the packet data gateway then there 
are two ways of transporting the user packet data to the packet data gateway. 
One method is to establish a secure tunnel between the WLAN access network 
and the packet data gateway. This method is called network based tunneling 
as the WLAN user is not involved. The other method establishes a direct 
secure tunnel between the WLAN user client and the packet data gateway. 
This method is referred to as client based tunneling. The W, interface is used 
to inform the WLAN access network about tunneling related information. 


W^ interface. This interface connects the AAA server with HLR/HSS. The 
AAA server retrieves the authentication vectors over this interface from the 
HLR/HSS. The AAA server also retrieves the WLAN access-related sub- 
scriber information using this interface. This interface is also used by the 
AAA server to register itself for an authorized WLAN-capable user with the 
HLR/HSS. This interface also helps the AAA server to get an indication of 
subscription-related changes from the HLR/HSS. The AAA server generates 
temporary identifiers for the WLAN user for security. The temporary identi- 
fiers are used as far as possible over the WLAN radio access network by the 
WLAN user. This interface is quite similar to the mobile application part 
(MAP) С, interface defined between SGSN and HLR/ HSS. This interface is 
based on the MAP or DIAMETER protocol. 


Wyinterface. This interface connects the AAA server with the 3GPP charging 
control function or charging gateway function. This interface transports 
charging data toward the 3GPP charging control/gateway function. The 
charging data is collected by the AAA server from either the packet data 
gateway over the W, interface or the Wp interface from the WLAN access 
network or both. This interface is based on DIAMETER or GPRS tunneling 
protocol (GTP). 


W, interface. This interface connects the AAA server with the 3GPP on-line 
charging system for credit control checks for the WLAN-capable user. This 
interface is based on DIAMETER protocol. 


W, interface. This interface connects the AAA server with the packet gate- 
way for transport of charging, related information and tunneling related 
information to the AAA server from packet data gateway. This interface is 
based on DIAMETER protocol. 


W; interface. This interface connects the packet data gateway with the packet 
data network. The packet data network may be an external public or private 
data network or an operator's internal packet data network. The protocol 
for this interface is dependent upon the packet data network. 
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22.8.1 Authentication 

An authentication similar to GPRS may occur within the WLAN, depending on 
the implementation. Where the GPRS operator owns the WLAN, it is likely that 
the operator will reuse SIM-based authentication or 3GPP-based USIM authen- 
tication for UMTS subscribers within the WLAN environment. Similarly, for 
a subscriber to access services provided by a GPRS operator over any WLAN 
access network, regardless of whether the WLAN is owned by a GPRS opera- 
tor, (U)SIM-based authentication can be used. To reuse 3GPP subscription, 3GPP 
interworking WLAN terminals will need access to UICC smart cards with SIM/ 
USIM applications. A WLAN equipped with a SIM/USIM smart card is called 
WLAN UE. Given the need for dual-mode (WLAN-cellular) UEs, SIM/USIM will 
be available in those UEs. The architecture of interworking WLAN access reusing 
3GPP USIM/SIM and HSS is shown in Figure 22.12. 

The authentication procedure shown in Figure 22.13 is based on the deploy- 
ment of IEEE 802.1X with 802.11. The cellular access gateway provides the 
AAA server functionality in the cellular operator’s IP core. The access gateway 
interworks with the home location register (HLR) to obtain the authentication 
parameters used to create the authentication challenge to the UE and validate the 
response to the challenge. The EAP is used in the WLAN to perform authentica- 
tion of the UE, passing the subscriber identity, SIM-based authentication data, and 
encrypted session key(s) to be used for encryption for the life of the session [3,4]. 
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Figure 22.12 WLAN system architecture reusing the 3GPP subscription. 
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The authentication process starts after the UE has associated with an AP. 
The UE sends an EAP-Over-WLAN (EAPOW) Start message to trigger the initia- 
tion of 802.1X authentication. In steps 2 and 3 the identity of the UE is obtained 
with standard EAP-Request/Response messages (see Figure 22.13). Next, the AP 
initiates a RADIUS dialog with the access gateway by sending an Access-Request 
message that contains the identity reported by UE. In the SIM-based authentica- 
tion, this identity typically includes the IMSI value stored in the SIM card. The 
access gateway uses IMSI and other information included in the identity (i.e., a 
domain name) to derive the address of the HLR/HSS that contains subscription 
data for that particular UE. In steps 5 and 6, the access gateway retrieves one or 
more authentication vectors from the HLR/HSS. These could be either UMTS 
authentication vectors (if the UE is equipped with a USIM) or GSM authentica- 
tion vectors. In both cases, a random challenge, RAND, and an expected response, 
XRES, is included in every authentication vector. In steps 7 and 8, the random 
challenges sent to the UE, which runs the authentication algorithm implemented 
in the (U)SIM card and generates a challenge response value (SRES). In steps 


UE WLAN(AP) 3GPP AAA Server HLR/HSS 


1. EAPOW-start 


2. EAP-request/identity 


3. EAP-response/identity 


4. RADIUS access-request 


5. Send Authentication Info. 


6. Send Authentication Info. Ack 


7. RADIUS Access Challenge 
8. EAP-request (RAND) 


9. EAP-response (SRES) 


10. RADIUS access-request 


11. RADIUS access-accept 


12. EAP-success 


13. EAPOW-key (WEP) 


Figure 22.13 SIM-based authentication over WLAN. 
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9 and 10, SRES is transferred to the access gateway and compared against the 
corresponding XRES value received from the HSS. If these values match, a 
RADIUS Access-Accept is generated in step 11 (otherwise, a RADIUS Access- 
Reject is generated). This instructs AP to authorize the 802.1X port and allow 
subsequent data packets from the UE. Note that the RADIUS Access-Accept mes- 
sage may also include authorization attributes, such as packet filters, which are 
used for controlling the user's access rights in the specific WLAN environment. In 
step 12, the AP transmits a standard EAP-Success message and subsequently an 
EAPOW-Key message for configuring the session key in the UE. 

Note that the authentication and authorization in the above procedure is 
controlled by UE's home environment (i.e., home GPRS network). The AP in 
the visited WLAN implements 802.1X and RADIUS but relies on the HSS in 
the home environment to authenticate the user. Figure 22.14 shows the protocol 
architecture for the authentication process. The UE is ultimately authenticated by 
HSS by means of either the GSM AKA or the UMTS AKA mechanisms. 

The WLAN access network is connected to a 3GPP AAA proxy via the W, 
reference point. The W, reference point is used for authentication and key agree- 
ment signaling, and the protocols in this reference point are extensible authentica- 
tion protocol (EAP) over DIAMETER or RADIUS (see Figure 22.15). 3GPP AAA 
proxy forwards authentication signaling between the WLAN access network and 
the 3GPP AAA server over the W, reference point. The 3GPP AAA server veri- 
fies if the subscriber is authorized to use WLAN. The authorization information 
and authentication vectors needed in the authentication protocols are stored by 
the HSS. The 3GPP AAA server retrieves this information over the W, reference 
point. 

After the user has been successfully authenticated and authorized for network 
access, the WLAN access network grants UE access to an IP network. In the sim- 
plest case, the IP network is the public Internet, and the user data is directly routed 
from the WLAN access network to the Internet. 


AKA/SIM 
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UE AP Access Gateway HLR/HSS 


Figure 22.14 A loosely coupled WLAN control plane for authentication. 
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Figure 22.15 3GPP-WLAN interworking, authentication, and roaming architecture. 


22.8.2 User Data Routing and Access to Services 

The IP network selection is based on a parameter called WLAN access point 
name (W-APN) similar to the APN parameter used in GPRS. The UE indicates 
the desired IP network with W-APN. The network authorizes the request, or veri- 
fies that the user has the right to use the W-APN. After selecting the IP network, 
appropriate tunnels are established to route the user data to the selected IP net- 
work. The tunnel is terminated in the home operator packet data gateway (PDG). 
The PDG is similar to the GGSN used in GPRS. The W; reference point between 
the PDG and the remote network is similar to the G; reference point used between 
GGSN and the remote IP networks in GPRS. In the visited 3GPP network, the 
WLAN access gateway (WAG) is required to implement tunneling. The reference 
points W,, Wp, W,, апа W; are used to convey the user data plane, and W, and 
W,, are used for control (see Figure 22.16). 


22.8.3 3GPP-based Charging for WLAN 

The WLAN charging architecture is shown in Figure 22.17. Charging informa- 
tion about WLAN is collected at the WLAN access network and forwarded to 
the 3GPP visited and home networks. The AAA server in the home 3GPP net- 
work authorizes each user's access to a WLAN. Before authorizing a prepaid 
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Figure 22.16 User data routing in WLAN and 3GPP interworking. 


user to access the WLAN for direct Internet access, the 3GPP AAA server makes 
a credit reservation from the user's prepaid amount in the OCS (online charging 
system) over the W, reference point. The 3GPP AAA server monitors the received 
accounting information from the WLAN access network. When the downloaded 
credit is exhausted a new credit request from OCS is triggered to cover the forth- 
coming accounting reports from the WLAN access network. At the termination 
of the WLAN connection, the 3GPP AAA server returns any unused credit back 
to the OCS. 

After authorization to access the WLAN access network is completed, a 
user-specific accounting session is established between the WLAN access network 
and the 3GPP home network. The accounting session is established with standard 
AAA accounting signaling, and the reference point for this signaling is Wp. At 
the establishment of the accounting session the 3GPP AAA server indicates to 
the WLAN a suitable set of accounting criteria, such as an accounting unit (e.g., 
amount of transferred kilobytes) and reporting threshold to be utilized. After the 
accounting session establishment the WLAN collects accounting information and 
reports it to the 3GPP AAA server over the W, reference point. 
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Figure 22.17 Charging infrastructure and reference points in the 3GPP-WLAN interworking architecture. 
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All associated IP flows traverse through the PDG; thus, more accurate and 
service-specific charging information can be collected at the PDG. The resource 
consumption by each IP flow can be monitored and collected internally at the 
PDG. For charging of the traversing IP flows, the PDG is also connected to the 
OCS by the G, reference point and to the CG (charging gateway) by the С, ref- 
erence point. At the establishment of a certain IP flow via the PDG, the PDG 
requests credit for IP flow charging from the OCS over the G, reference point in a 
similar way as the 3GPP AAA server does over the W, reference point for WLAN 
access charging. 


22.8.4 Session Mobility 

In the loose coupling, mobile IP is used to provide session mobility across GPRS 
and WLAN. This is in contrast to the tight coupling approach in which the GPRS 
mobility management procedure is used. When the UE moves from GPRS to 
WLAN, it performs a mobile internet protocol (MIP) registration via the FA that 
resides in the WLAN. The FA completes the registration with the HA to be used 
as a forwarding address for the packet destined to the UE. The FA then associates 
the CoA with that of the UE and acts as a proxy on behalf of the UE for the life 
of the registration. This way, the UE retains its IP address when it moves from the 
WLAN to GPRS. 


22.9 Local Multipoint Distribution Service 

Local multipoint distribution service (LMDS) with two-way capability gives long- 
distance carriers a relatively cheap entree into the local market with multiple 
operating benefits. 

LMDS is a new type of stationary broadband wireless access technology 
designed for a mass subscriber marketplace (see Figure 22.18). It is based on 
millimeter micro frequencies — 2.4 GHz and above. LMDS now offers a potential 
for cheaper in-building bandwidth than fiber or copper. 

Local in LMDS denotes that propagation characteristics of signals in this 
frequency range limit potential coverage area of a single cell site; ongoing field 
trials conducted in metropolitan centers place the range of an LMDS transmitter 
up to 5 miles. 

Multipoint indicates that signals are transmitted in the point-to-multipoint 
or broadcast method; the wireless return path, from the subscriber to the base 
station, Is a point-to-point transmission. 

Distribution refers to the distribution of signals, which may consist of simul- 
taneous voice, data, Internet, and video traffic. 

Service implies the subscriber nature of the relationship between the opera- 
tor and customer; the services offered through an LMDS network are entirely 
dependent on the operator's choice of business. 
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Figure 22.18 Example of LMDS configuration. 
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LMDS is an ideal candidate for integrating voice and data in new 
multitenant buildings. With just an antenna at the end-user site, located within 
3 to 5 km of an operator's two-way LMDS cell, the access technology can deliver 
large bandwidths. Corporate applications can include anything from Ethernet 
and fast Ethernet LAN extension to full-scale campus networking, alternative 
cable TV, video-conferencing, high-speed Internet access, and corporate video 
on demand. 

LMDS transmissions are strictly line-of-sight. For this reason, carriers are 
apt to target business districts where rooftop mounting of subscriber dishes is 
permissible. LMDS services are permitted at a number of frequencies: 24 GHz, 
28 GHz, 31 GHz, 38 GHz, and soon 40 GHz. The 28 GHz region has a spectrum 
allocation of 1.3 GHz, and currently offers the greatest potential for bundling 
diverse services. The capacity of 28 GHz LMDS, consisting of three bands— 27.5 
to 28.35 GHz, 29.10 to 29.25 GHz, and 31.0 to 31.5 GHz —is such that the sys- 
tem can accommodate high-speed Internet access. 

Other applications of LMDS include multiple virtual private networks for 
corporations and government agencies or ATM telephony and streaming video, 
including video broadcasting. LMDS is seen primarily as a data pipe. LMDS oper- 
ators have plans for supporting all kinds of corporate network services, including 
secure file transfer and messaging within a virtual LAN context, video conferenc- 
ing, and IP telephony. In LMDS, a data access scheme can be FDMA, TDMA, or 
CDMA. The typical data rate of LMDS is 45 Mbps. 

Advantages of LMDS for broadband are: 


* Lower entry/deployment costs than wireline 

* Fase/speed of deployment 

* Fast realization of revenue (resulting from rapid deployment) 

* Scalable architecture (demand-based build-out) 

* No stranded capital when customers leave 

* Cost-effective network maintenance, management, and operations 

The IEEE 802.16.2 standard focuses on the coexistence of a fixed broad- 

band wireless access (BWA) system with other wireless systems and provides rec- 
ommendations for the design and coordinated deployment of fixed broadband 
wireless access systems in order to control interference and facilitate coexistence. 
IEEE 802.16.2 analyzes appropriate coexistence scenarios and provides guidance 
for system design deployment, coordination, and frequency usage. IEEE 802.16.2 
covers 2 to 66 GHz frequencies, with a detailed emphasis on 3.5, 10.5, and 23.5 


to 43.5 GHz frequencies. 
The following are the present IEEE 802.16 standards: 


e P802.16a: 2-11 GHz licensed band; addresses point-to-multipoint BWA 
systems, OFDM, and single-carrier systems 
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e P802.16b: license-exempt bands, with focus on 5-6 GHz; wireless high-speed 
unlicensed metropolitan area network (HUMAN), OFDM 


• Р802.16.2: focuses on 2-11 GHz frequency band and the coexistence of 
BWA systems 


22.10 Multichannel Multipoint Distribution System 
Multichannel multipoint distribution service (MMDS) is a new technology for 
wireless access — particularly useful for the Internet (see Figure 22.19). MMDS 
signals have longer wavelengths than that of LMDS and can travel farther without 
losing significant power. MMDS signals do not get blocked easily by objects and 
are less susceptible than LMDS to rain absorption. Repeater stations can be used 
to redirect MMDS signals. With MMDS, a transmitting tower placed at a high 
elevation can reach customers within a 35-mile radius who have receiving dishes 
on the side or roof of the building. Several service providers consider MMDS 
a technology they can use to reach local customers without negotiating access 
agreements with regional operating companies. LMDS, in contrast to MMDS, 
covers a smaller radius (only up to 5 miles) and is more expensive to deploy. 

MMDS has a narrow spectrum allocation (2.5 to 2.7 GHz in the United 
States); hence, it has a slower data rate compared to LMDS. The typical data rates 
of MMDS are 0.5 to 3 Mbps. The access schemes in MMDS аге FDMA, TDMA, 
OFDM, or CDMA. Most of the MMDS are line-of- sight systems, but a non-LOS 
system is possible. The network topology for MMDS can be either point-to-point 
or point-to-multipoint. Transmission power used in MMDS is usually in the 1- 
to-100-watt range, which is substantially below the transmission power require- 
ments of VHF and UHF terrestrial broadcasting stations. 

MMDS-favored cell architecture is a single, large microcell. While multicell 
deployments have been implemented, they are generally not efficient. The reason 
for this is twofold. The 2.5-GHz frequency band requires either large antennas, 
which are not well-received consumer client receivers, or smaller antennas with a 
very broad beam. Often smaller, low-cost antennas are used. The consequence is 
that multipath is induced, due to reflections of the signal associated with broad 
antenna beams. This in turn requires that the access method provide significant 
immunity to the effects of multipath. 

In the single cell MMDS deployment, the available bandwidth is limited to 
the frequency band licensed, which is equal to or less than 200 MHz total. Using 
this limited bandwidth for two-way, interactive Internet access is certainly feasible, 
but does not produce broadband access to any reasonably sized population base. 
However, the use of data casting, which exploits the multiplying effect of data 
multicast and broadcast, can provide a cost-effective and easily deployed model. 
The MMDS model is dramatically affected by the combination of bandwidth 
limitations, propagation characteristics, and the resulting impact of preferred 
modulation type. Table 22.1 provides a comparison of LMDS and MMDS. 
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Figure 22.19 Typical MMDS system for digital video and wireless Internet. 


сс  0£-cc 


SIOMJIN LAY 9pIM DOE pue S10 A9N вәлү [e907 иәәләд Бирулолмәзц| 


22.11 Summary 


Table 22.1 Comparison of LMDS versus MMDS. 


Feature 


Frequency range 
Propagation characteristics 


Favored cell architecture 


Impact of cell architecture 


Ability to support 2-way 
system architecture 


Link pathology 
Range 

Data rate 
Access schemes 
Target market 


Customer premises equip- 
ment costs 
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LMDS 


28-31GHz (U.S.) 
2-42 GHz (rest of world) 


Good for medium range, 
LOS, <5 miles, free space 
attenuation 


Multiple, small microcells 


Large bandwidth avail- 
able, which can effectively 
be increased by decreas- 
ing cell size 


Well suited due to small 
cell size, large available 
bandwidth, and highly 
directive antennas in rea- 
sonably small-sized cell 


Long range and broad 
antennas beams ensure 
significant multipath 


Up to 5 miles 


Typically up to 45 Mbps, 
burst rate up to 311 Mbps 


FDMA, TDMA, CDMA 


Large and medium enter- 
prises 


High 
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MMDS 


2.5-2.7 GHz 


Good for short range, 
LOS, x35 miles, free space 
attenuation 


Single, large microcell 


Limited bandwidth avail- 
ability due to no frequency 
reuse 


Limited due to bandwidth, 
antenna characteristics, 
and propagation charac- 
teristics 


Short range and highly 
directive antennas mean 
little or no multipath 


Up to 35 miles 
Typically 0.5 to 3Mbps 


FDMA, TDMA, OFDM, 
CDMA 


Residential, small enter- 
prises 


Low to medium 


High-tier cellular systems such as GPRS provide users high mobility but less 
bandwidth. On the other hand, low tier wireless systems such as WLAN offer 
high bandwidth with less mobility. To support seamless roaming between het- 
erogeneous wireless networks is one of the key issues in the future mobile 
communication system. This chapter presents the strategies for the interworking 
of UMTS-WLAN and discusses the general aspects of integrated WLANs and 
cellular data networks. We examined the generic interworking architectures that 
have been proposed in the technical literature and reviewed the current standard- 
ization activities in the area of WLAN-cellular data network integration. 3GPP 
system-based authentication, authorization, and security key agreements using an 


22-32 22 Interworking between Local Area Networks and 3G Wide Area Networks 


SIM/USIM card, user data routing and service access, as well as end-user charg- 
ing were discussed. The chapter concluded with the discussion of LMDS and 


MMDS. 
Problems 
22.1 What are the requirements for interworking between a wireless wide 
area network (WWAN) and a wireless local area network (WLAN)? 
22.2 Discuss briefly the various ways to achieve interworking between a 
WWAN and a WLAN. 
22.3 Discuss tight coupling architecture between the IEEE 802.11 WLAN and 
GPRS. 
22.4 What is the WLAN adaptation function (WAF) in tight coupling archi- 
tecture? Discuss briefly. 
22.5 Discuss the GPRS interworking function (GIF)/routing area update 
(RAU) discovery procedure in tight coupling architecture. 
22.6 Discuss loose coupling architecture between the IEEE 802.11 WLAN 
and GPRS. 
22.7 How is authentication achieved in loose coupling architecture? Discuss 
briefly. 
22.8 Compare tight and loose coupling architecture for interworking between 
IEEE 802.11 WLAN and GPRS. 
22.9 Discuss briefly local multipoint distribution system (LMDS). 
22.10 What is the multichannel multipoint distribution system (MMDS)? 
Compare it with LMDS. 
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CHAPTER 23 


Fourth Generation Systems and 
New Wireless Technologies 


23.1 Introduction 


With the rapid development of wireless communication networks, it is expected 
that fourth-generation (4G) mobile systems will be launched within a decade. 4G 
mobile systems focus on seamless integration of existing wireless technologies 
including WWAN, WLAN, and Bluetooth (see Figure 23.1). This is in contrast 
with 3G, which merely focuses on developing new standards and hardware. The 
recent convergence of the Internet and mobile radio has accelerated the demand 
for “Internet in the pocket,” as well as for radio technologies that increase data 
throughput and reduce the cost per bit. Mobile networks are going multimedia, 
potentially leading to an explosion in throughput from a few bytes for the short 
message service (SMS) to a few kilobits per second (kbps) for the multimedia 
messaging service (MMS), to several 100 kbps for video content. In addition to 
wide area cellular systems, diverse wireless transmission technologies are being 
deployed, including digital audio broadcast (DAB) and digital video broadcast 
(DVB) for wide-area broadcasting, local multipoint distribution service (LMDS), 
and multichannel multipoint distribution service (MMDS) for fixed wireless 
access. IEEE 802.11b, 11a, 11g, 11n, and 11h standards for wireless local area 
networks (WLANs) are extending from the enterprise world into public and resi- 
dential domains. Because they complement cellular networks, these new wireless 
network technologies and their derivatives may well prove to be the infrastruc- 
ture components of the future 4G mobile networks when multistandard terminals 
become widely available. This is already the case for WiFi in the public *hot- 
spots," which is being deployed by mobile operators around the world with the 
aim to offer seamless mobility with wireless wide-area networks. 

The 4G systems will encompass all systems from various networks, public 
to private, operator-driven broadband networks to personal areas, and ad hoc 
networks. The 4G systems will be interoperable with 2G and 3G systems, as well 
as with digital (broadband) broadcasting systems. The 4G intends to integrate 
from satellite broadband to high altitude platform to cellular 2G and 3G systems 
to wireless local loop (WLL) and broadband wireless access (BWA) to WLAN, 
and wireless personal area networks (WPANSs), all with IP as the integrating 
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Figure 23.1 Seamless connections of networks. 


mechanism. Table 23.1 provides a comparison of key parameters of 4G with 
3G systems. 


23.2 4G Vision 


The 4G systems are projected to solve the still-remaining problems of 3G sys- 
tems [4,7,8]. They are designed to provide a wide variety of new services, from 
high-quality voice to high-definition video to high-data-rate wireless channels. 
The term 4G is used broadly to include several types of broadband wireless access 
communication systems, not only cellular systems. 4G is described as MAGIC — 
Mobile multimedia, Anytime anywhere, Global mobility support, Integrated wire- 
less solution, and Customized personal service (see Figure 23.2). The 4G systems 
will not only support the next generation mobile services, but also will support 
the fixed wireless networks. The 4G systems are about seamlessly integrating 
terminals, networks, and applications to satisfy increasing user demands. 
Accessing information anywhere, anytime, with a seamless connection 
to a wide range of information and services, and receiving a large volume of 
information, data, pictures, video, and so on, are the keys of the 4G infrastruc- 
ture. The future 4G systems will consist of a set of various networks using IP as 
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Table 23.1 Comparison of key parameters of 4G with 3G. 


Details 3G including 2.5G (EDGE) 4G 


Major requirement driving Predominantly voice driven, Converge data and voice 


architecture 


Network architecture 


Speeds 


Frequency band 


data was always add on 


Wide area cell-based 


384 kbps їо 2 Mbps 


Dependent on country or 
continent (1.8 to 2.4 GHz) 


over IP 


Hybrid-integration of 
WLAN (WiFi, Bluetooth) 
and wireless wide-area 
networks 


20 to 100Mbps in mobile 
mode 


Higher frequency bands 
(2 to 8 GHz) 


Bandwidth 5 to 20 MHz 100 MHz or more 

Switching design basis Circuit and packet All digital with packetized 
voice 

Access technologies WCDMA, cdma2000 OFDM and multicarrier 
(MC)-CDMA 

Forward error correction Convolutional codes rate 1⁄2, % Concatenated coding 
schemes 


Component design Smart antenna, software- 
defined multiband and 


wideband radios 


Optimized antenna design, 
multiband adapters 


Internet protocol (IP) Number of airlink protocol All IP (IPv6.0) 
including IPv5.0 
Mobile top speed 200 km/h 200 km/h 


a common protocol. 4G systems will have broader bandwidth, higher data rate, 
and smoother and quicker handoff and will focus on ensuring seamless service 
across a multiple of wireless systems and networks. The key is to integrate the 
4G capabilities with all the existing mobile technologies through the advanced 
techniques of digital communications and networking. 


23.3 4G Features and Challenges 
Some key features (primarily from users’ points of view) of 4G mobile networks 
are as follows (see Figure 23.3): 

* High usability: anytime, anywhere, and with any technology 

* Support for multimedia services at low transmission cost 

* Personalization 


* [ntegrated services 
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Figure 23.2 4G visions. 
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Figure 23.3 4G features. 


4G networks will be all-IP-based heterogeneous networks that will allow 
users to use any system at anytime and anywhere. Users carrying an integrated 
terminal can use a wide range of applications provided by multiple wireless 
networks. 

4G systems will provide not only telecommunications services, but also 
data and multimedia services. To support multimedia services, high-data-rate ser- 
vices with system reliability will be provided. At the same time, a low per-bit 
transmission cost will be maintained by an improved spectral efficiency of the 
system. 

Personalized service will be provided by 4G networks. It is expected that 
when 4G services are launched, users in widely different locations, occupations, 
and economic classes will use the services. In order to meet the demands of these 
diverse users, service providers will design personal and customized service for 
them. 4G systems will also provide facilities for integrated services. Users can use 
multiple services from any service provider at the same time. 

To migrate current systems to 4G with the above-mentioned features, we 
have to face a number of challenges. Table 23.2 lists the key challenges and their 
proposed solutions. Figure 23.4 shows the carriers migration from 3.5G to 4G 
systems. 
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Table 23.2 4G Key challenges and their proposed solutions. 


Mobile Station 


Multimode user terminals 


Wireless system discovery 


Wireless system selection 


System 


Terminal mobility 


Network infrastructure and 
QoS support 


Security 


Key challenges 


To design a single user 
terminal that can operate in 
different wireless networks, 
and overcome design prob- 
lems such as limitations 

in device size, cost power 
consumption, and backward 
compatibilities to systems 


To discover available 
wireless systems by 
processing the signals sent 
from different wireless 
systems (with different 
access protocols and incom- 
patible with each other) 


Every wireless system has 
its unique characteristics 
and role. The proliferation of 
wireless technologies com- 
plicates the selection of the 
most suitable technology 
for a particular service at a 
particular time and place. 


To locate and update the 
locations of the terminals 

in various systems. Also, to 
perform horizontal (within 
the same system) and 
vertical (within different sys- 
tems) handoff as required 
with minimum handover 
latency and packet loss 


To integrate the existing 
non-IP-based and IP-based 
systems, and to provide 
QoS guarantee for 
end-to-end services that 
involves different systems 


The heterogeneity of wire- 
less networks complicates 
the security issue. Dynamic 
reconfigurable, adaptive, and 
lightweight security mecha- 
nisms should be developed 


Proposed solutions 


A software-defined radio 
approach can be used: the 
user terminal adapts itself to 
the wireless interfaces of the 
networks. 


User- or system-initiated 
discoveries, with automatic 
download of software 
modules for different 
wireless systems 


The wireless system can 

be selected according to 

the best possible fit of user 
QoS requirements, available 
network resources, or user 
preferences. 


Signaling schemes and fast 
handoff mechanisms are 
proposed. 


A clear and comprehensive 
OoS scheme for the UMTS 
system has been proposed. 
This scheme also supports 
interworking with other 
common QoS technologies. 


Modifications in existing 
security schemes may be 
applicable to heterogeneous 
systems. Security handoff 
support for application 
sessions is also proposed. 


(Continued) 
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Fault tolerance and 


survivability 


Service 


Multioperators and billing 
system 


Personal mobility 


Key challenges 


To minimize the failures and 
their potential impacts in 
any level of tree-like topol- 
ogy in wireless networks. 


To collect, manage, and 
store the customers" 
accounting information 
from multiple service 
providers. Also, to bill the 
customers with simple but 
detailed information. 


To provide seamless 
personal mobility to users 
without modifying the 
existing servers in hetero- 
geneous systems. 


23.4 Applications of 4G 
The following are some of the applications of the 4G system: 
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Proposed solutions 


Fault-tolerant architectures 
for heterogeneous networks 
and failure recovery proto- 
cols are proposed. 


Various billing and 
accounting frameworks 
are being proposed to 
achieve this goal. 


Personal mobility 
frameworks are proposed. 
Most of them use mobile 
agents, but some do not. 


e Virtual presence —4G will provide user services at all times, even if the user 
is off-site. 

• Virtual navigation —4G will provide users with virtual navigation through 
which a user can access a database of streets, buildings, etc., of a large city. 
This requires high speed transmission. 


• Tele-medicine—4G will support the remote health monitoring of patients 
via video conference assistance for a doctor at anytime and anywhere. 

• Tele-geo-processing applications —4G will combine geographical informa- 
tion systems (GIS) and global positioning systems (GPS) in which a user will 
get location querying. 

e Education —4G will provide a good opportunity to people anywhere in the 
world to continue their education on-line in a cost-effective manner. 


23.5 4G Technologies 


23.5.1 Multicarrier Modulation 
Multicarrier modulation (MCM) is a derivative of frequency-division multiplexing. 
It is not a new technology. Forms of multicarrier systems are currently used in 


DSL modems and digital audio/video broadcast (DAB/DVB). MCM is a baseband 


3.5G 
Carrier Network Гы [сәт] зәм [muss spee J pretene Tee 


Downlink Europe OFDM 34 Mbps 100 M 60 GHz 
Packet Access 

(HSDPA) Europe WSI OFDM  »34Mbps >100М 40 GHz 

WCDMA 

10 Mbps Mobile Broadband System-MBS 


Wireless Strategic Initiative-WSI 


WiFi World WiFi 802.11b 6-11 Mbps >100M  40GHz 
Europe  HyperLAN2 802.11a 34 Mbps 100 M 5 GHz 
3G IEEE HUMAN 802.11а  34Mbps 100M 5 GHz 


ETSI BRAN 802.11a 34 Mbps 100M 17 GHz 


IEEE & 802.11a 
Europe MIND (IPv6) 


High-speed Unlicensed MAN-HUMAN 
Broadband Radio Access Network-BRAN 
Mobile IP Network Development-MIND 


34 Mbps 100 M 17 GHz 


Sprint 802.16a OFDM  10-72Mbps 35 Miles 2150 MHz 


Orthog FDM (antenna Smart) 


MMDS 


(Multi-Channel Multipoint Distribution Service) 


Reference: Presentation notes taken from presentation by Carl Burnett, for Spring 
Standards and Protocols Class, June 2002 


Figure 23.4 Carrier migration from 3.5G to 4G. 
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process that uses parallel equal bandwidth subchannels to transmit information 
and is normally implemented with fast Fourier transform (FFT) techniques. MCM’s 
advantages are better performance in the inter-symbol-interference environment, 
and avoidance of single-frequency interferers. However, MCM increases the peak- 
to-average ratio of the signal, and to overcome inter-symbol-interference a cyclic 
extension or guard band must be added to the data. The difference, D, of the 
peak-to-average ratio between MCM and a single carrier system is a function of 
the number of subcarriers, N, as: 


D(dB) = 10logN (23.1) 


Any increase in the peak-to-average ratio of a signal requires an increase in 
linearity of the system to reduce distortion. Linearization techniques can be used, 
but they increase the cost of the system. 

If Ly is the original length of block, and the channel’s response is of length 
Le, the cyclically extended symbol has a new length Ly + Le — 1. The new sym- 
bol of length Lẹ + Le — 1 sampling periods has no inter-symbol interference. 
The cost is an increase in energy and uncoded bits are added to the data. At the 
MOM receiver, only L, samples are processed and Le — 1 samples are discarded, 
resulting in a loss in signal-to-noise ratio (SNR) as: 
=A 


с 


L, + 
(SNR), | = 10105 (dB) (23.2) 


loss 


Two different types of MCM are likely candidates for 4G. These include 
multicarrier code division multiple access (MC-CDMA) and orthogonal frequency 
division multiplexing (OFDM) using time division multiple access (TDMA). 
MC-CDMA is actually OFDM with a CDMA overlay. 

Similar to single-carrier CDMA systems, the users are multiplexed with orthog- 
onal codes to distinguish users in MC-CDMA. However, in MC-CDMA, each user 
can be allocated several codes, where the data is spread in time or frequency. Either 
way, multiple users simultaneously access the system. 

In OFDM with TDMA, the users are assigned time slots to transmit and receive 
data. Typically MC-CDMA uses quadrature phase shift keying (QPSK) for modu- 
lation, while OFDM with TDMA could use more high-level modulations, such as 
multilevel quadrature amplitude modulation (M-QAM) (where M = 4 to 256). 
However, to optimize overall performance, adaptive modulation can be used, where 
the level of quadrature amplitude modulation (QAM) for all subcarriers is chosen 
based on measured parameters. In OFDM the subcarrier pulse shape is a square 
wave. The task of pulse forming and modulation is performed by a simple inverse 
fast Fourier transform (IFFT) which can be implemented very efficiently. To decode 
the transmission, a receiver needs only to implement FFT. 
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IP 


Figure 23.5 A broadband channel divided into many parallel narrowband channels. 


The OFDM divides a broadband channel into many parallel subchannels. 
The subchannel pulse shape is a square wave (see Figure 23.5). The OFDM 
receiver senses the channel and corrects distortion on each subchannel before the 
transmitted data can be extracted. In OFDM, each of the frequencies is an integer 
multiple of a fundamental frequency. This ensures that even though subchannels 
overlap, they do not interfere with each other (see Figure 23.6). 


23.5.2 Smart Antenna Techniques 

Smart antenna techniques, such as multiple-input multiple-output (MIMO) systems, 
can extend the capabilities of the 3G and 4G systems to provide customers with 
increased data throughput for mobile high-speed data applications. MIMO systems 
use multiple antennas at both the transmitter and receiver to increase the capacity 
of the wireless channel (see Figure 23.7). With MIMO systems, it may be possible 
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Amplitude 
Allocated Bandwidth 


Users 


Frequency 


Figure 23.6 Overlapping subchannels. 


to provide in excess of 1 Mbps for 2.5G wireless TDMA EDGE and as high as 
20 Mbps for 4G systems. 

With MIMO, different signals are transmitted out of each antenna simul- 
taneously in the same bandwidth and then separated at the receiver. With four 
antennas at the transmitter and receiver this has the potential to provide four 
times the data rate of a single antenna system without an increase in transmit 
power or bandwidth. 

MIMO techniques can support multiple independent channels in the same 
bandwidth, provided the multipath environment is rich enough. What this means 
is that high capacities are theoretically possible, unless there is a direct line- 
of-sight between the transmitter and receiver. 

The number of transmitting antennas is M, and the number of receiving 
antennas is N, where N = M. We examine four cases: 


* Single-Input, Single-Output (SISO) 
* Single-Input, Multiple-Output (SIMO) 
* Multiple-Input, Single-Output (MISO) 
* Multiple-Input, Multiple-Output (MIMO) 
Single-input, single-output: The channel bandwidth is B, the transmitter power 


is P, the signal at the receiver has an average signal-to-noise ratio of SNR, then 
the Shannon limit on channel capacity C is 


C = Blog, (1 + SNR,) (23.3) 
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Figure 23.7 MIMO system. 
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Single-input, multiple-output: There are N antennas at the receiver. If the 
signals received on the antennas have on average the same amplitude, then they 
can be added coherently to produce an N? increase in signal power. There are 
N sets of noise sources that are added coherently and result in an N-fold increase 
in noise power. Hence, the overall increase in SNR will be: 


N? X (signal power) 


SNR = - 
М х (noise) 


= Мх SNR, (23.4) 


The capacity for this channel is approximately equal to 


С = Blog, [1 + N X SNR, ] (23.5) 


Multiple-input, single-output: We have M transmitting antennas. The total 
power is divided into M transmitter branches. If the signals add coherently at 
the receiving antenna, we get an M-fold increase in SNR as compared to SISO. 
Because there is only one receiving antenna, the noise level is same as SISO. The 
overall increase in SNR is approximately 


M? - [(signal power)/M] 


noise 


SNR = 


= M X SNR, (23.6) 


Multiple-input, multiple-output: MIMO systems can be viewed as a combination 
of MISO and SIMO channels. In this case, it is possible to achieve approximately an 
MN-fold increase in the average SNR giving a channel capacity equal to 


С =~ Blog, (1 + MX N X SNR) (23.7) 


Assuming N = M, we can send different signals using the same bandwidth 
and still be able to decode correctly at the receiver. Thus, we are creating a chan- 
nel for each one of the transmitters. The capacity of each one of these channels is 
roughly equal to 


C ingie ~ Blog,(1 +A X SNR, (23.8) 


single 


Since we have M of these channels (M transmitting antennas), the total capacity 
of the system is 


C = MBlog,|1 + x x SNR, (23.9) 
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We get a linear increase in capacity with respect to the transmitting antennas. As 
an example we assume SNR, is equal to 10dB, M = 4, N = 5 and bandwidth В 
(MHz) and list the system capacity for each channel type in Table 23.3. 


23.5.3 OFDM-MIMO Systems 

OFDM and MIMO techniques can be combined to achieve high spectral efficiency 
and increased throughput. The OFDM-MIMO system transmits independent 
OFDM modulated data from multiple antennas simultaneously. At the receiver, 
after OFDM demodulation, MIMO decodes each subchannel to extract data from 
all transmit antennas on all the subchannels. 


23.5.4 Adaptive Modulation and Coding with Time-Slot Scheduler 

In general, TCP/IP is designed for a highly reliable transmission medium in wired 
networks where packet losses are seldom and are interpreted as congestion in the net- 
work [1]. On the other hand, a wireless network uses a time varying channel where 
packet losses may be common due to severe fading. This is misinterpreted by TCP 
as congestion which leads to inefficient utilization of the available radio link capac- 
ity. This results in significant degradation of the wireless system performance. 

There is a need for a system with efficient packet data transmission using 
TCP in 4G[2,3,5]. This can be achieved by using a suitable automatic repeat 
request (ARQ) scheme combined with an adaptive modulation and coding sys- 
tem, and a time-slot scheduler that uses channel predictions. This way, the lower 
layers are adapted to channel conditions while still providing some robustness 
through retransmission. The time-slot scheduler shares the spectrum efficiently 
between users while satisfying the QoS requirements. 

If the channel quality for each radio link can be predicted for a short dura- 
tion (say about 10 ms) into the future and accessible by the link layer, then ARQ 
along with an adaptive modulation and coding system can be selected for each 
user to satisfy the bit error rate (BER) requirement and provide high through- 
put. The scheduler uses this information about individual data streams (along 
with predicted values of different radio links and selected modulation and 
coding systems by the link layer) and distributes the time slots among the users. 


Table 23.3 Comparison of channel capacity for different channel types. 


Capacity Normalized capacity 
Channel type (Mbps) with respect to SISO 
SISO 3.45 B 1.0 
SIMO 5.66 B 1.64 
MISO 5.35 B 1.55 
MIMO (with same input) 7.64 B 2.21 


MIMO (with different input) 15B 4.35 
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The planning is done so that the desired QoS and associated priority to different 
users are guaranteed while channel spectrum is efficiently utilized. 


23.5.5 Bell Labs Layered Space Time (BLAST) System 

BLAST isa space division multiplexing (SDM)-based MIMO system. It provides the 
best trade-off between system performance (spectral efficiency and capacity) and 
system implementation complexity. The spectral efficiency of BLAST ranges from 
20 to 40 bps/Hz. It uses a zero-forcing (ZF) nonlinear detection algorithm based 
on a spatial nulling process combined with symbol cancellation to improve system 
performance. The BLAST exploits multipath by using scattering characteristics 
of the propagation environment to enhance transmission accuracy. Figure 23.8 
shows the architecture of the BLAST system. 


Transmitter: The data stream of a user is divided into multiple substreams. An 
array of transmit antennas (M) is used to simultaneously launch parallel data 
substreams. Each substream is mapped to a symbol by the same constellation and 
sent to its transmit antenna. All substreams are transmitted in the same frequency 
band and are independent of one another. Effective transmission rate is increased 
roughly in proportion to the number of transmit antennas used. The individual 
transmitter power is scaled by 1/M, so that the total power remains constant 
independent of the number of transmitters. 


Receiver: An array of antennas (N = M) is used to receive multiple transmitted 
substreams and their scattered images. Since substreams originate from different 
transmit antennas, they are located at different points in space. Using sophisti- 
cated signal processing, the substreams are identified and recovered. 


Model: Each time sequence s;(t), į = 1, 2, ..., M is referred to as a layer. At the 
receiver, the signal r;(t) is received at time ¢. It is a noisy superposition of the M 
transmitted signal respectively corrupted by noise n;(t): 


r{t) = X bt)s(t *n() i-1,2,3,.., N (23.10) 


where: 

bit) is the channel gain (complex transfer function) from transmit antenna 
j to receive antenna / at any time t 

We make the following assumptions: 


e Quasi-static flat fading channel. That is, channel gain /;(2) remains constant over 
a block of time, and then changes block by block in an independent manner. 


* Channel is rich scattering. This is true if antenna spacing is sufficient (i.e., 
several times of wavelength). This condition provides a large number of 
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Figure 23.8 Architecture of BLAST system. 
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local scatters around transmitter or receiver and supports that the channel 
gains are complex Gaussian and independent of one another. 


Equation 23.10 can be written as: 


[r] = [Н]. [s] + [n] (23.11) 
where: 
T1 nı S1 рі рә e e him 
T2 n2 S2 hoy ho ° ө hom 
Ir]}=]| ¢ [| =| [51 = | e [аа [Н] = о e ee e 
TN пм SM bui Рур 9 è bnm 


Signal Processing Algorithm: At the bank of the receiving antennas, high- 
speed signal processors look at signals from all the receiving antennas simultane- 
ously, first extracting the strongest substream from the morass, then proceeding 
with the remaining weaker signals, which are easier to recover once the stron- 
ger signals have been removed as a source of interference. Maximum-Likelihood 
(ML) detection is optimal for BLAST, but it is too complex to implement. As an 
example, with six transmit antennas and QPSK modulation, a total of 46 — 4096 
comparisons have to be made for each transmitted symbol. A low complexity 
suboptimal detection algorithm, called ZF is used. At each symbol time, the stron- 
gest layer (transmitted signal) is first detected and its effect is cancelled for each 
received signal. We then proceed to detect the strongest of the remaining layers, 
and so on. The ZF algorithm consists of four recursive steps: 


1. Ordering: Determine the optimal detection order. 


2. Nulling: Choose the nulling vector to null out all the weaker transmit signals 
and obtain the strongest transmit signal. 


3. Slicing: Detect the estimated value of the strongest signal by slicing to the 
nearest value in the signal constellation. 


4. Cancellation: Cancel the effect of the strongest signal from the received 
signal vector to reduce the detection complexity for the remaining transmit 
signal. Go to step 2— nulling process. 


Implementation: Each transmitter is a QAM transmitter and operates with 
synchronized symbol timing, i.e., the collection of transmitters comprises a 
vector valued transmitter. 16-QAM signal constellation is used for each transmit- 
ter. The total transmitted power is kept constant. Blast algorithm in 3 different 
architectures 4 X 8, 8 X 12, and 12 X 16 have been used. Results are shown in 
Figures 23.9, 23.10, and 23.11. 
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BLAST: M =4, N 28, 16-QAM 
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Figure 23.9 BLAST 4 x 8. 


BLAST shows promising results in enhancing spectral efficiency. Further gain 
in spectral efficiency can be obtained by using high-level M-QAM and OFDM. 


23.5.6 Software-Defined Radio 

A software-defined radio (SDR) system is a radio communication system which 
uses software for the modulation and demodulation of radio signals. An SDR per- 
forms significant amounts of signal processing in a general purpose computer, or 
a reconfigurable piece of digital electronics. The goal of this design is to produce a 
radio that can receive and transmit a new form of radio protocol just by running 
new software. 

Software-defined radios have significant utility for cell phone services, which 
must serve a wide variety of changing radio protocols in real time. The hardware of 
a software-defined radio typically consists of a superheterodyne RF front end which 
converts RF signals from and to analog RF signals, and analog to digital converters 
and digital to analog converters which are used to convert digitized intermediate 
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Figure 23.10 BLAST 8 x 12. 


frequency (IF) signals from and to analog form, respectively. Software-defined radio 
can currently be used to implement simple radio modem technologies. In the long 
run, SDR is expected to become the dominant technology in radio communications. 
The following are some of the things that SDR can do that haven't been possible 
before: 


e Software-defined radios can be reconfigured “on-the-fly,” i.e., the universal 
communication device would reconfigure itself appropriately for the envi- 
ronment. It could be a cordless phone one minute, a cell phone the next, a 
wireless Internet gadget the next, and a GPS receiver the next. 


* Software-defined radios can be quickly and easily upgraded with enhanced 
features. In fact, the upgrade could be delivered over-the-air. 


* Software-defined radios can talk and listen to multiple channels at the same 
time. 
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BLAST: M =12, N= 16, 16-QAM 
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Figure 23.11 BLAST 12 x 16. 


* New kinds of radios can be built that have never before existed. Smart radios 
or cognitive radios (CRs) can look at the utilization of the RF spectrum in their 
immediate neighborhood and configure themselves for the best performance. 


23.5.7 Cognitive Radio 
With the CR paradigm, spectrum can be efficiently shared in a more flexible 
fashion by a number of operators/users/systems. The CR can be viewed as an 
enabling technology that will benefit several types of users by introducing new 
communications and networking models for the whole wireless world, creat- 
ing better business opportunities for the incumbent operators and new technical 
dimensions for smaller operators, and helping shape an overall more efficient 
approach regarding spectrum requirements and usage in the next generation wire- 
less networks. 

The CR can be regarded as an extension of SDR. In 2003, the IEEE 
Committee on Communications and Information Policy (CCIP) recommended CR 
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for consideration by the FCC as a means to conserve valuable spectrum utilization. 
The CR focuses on applying software capabilities that have been developed to sup- 
port algorithm control across a wide spectrum of signal processing technologies to 
add smarts to the software that allows it to determine when frequencies are free to 
use and then use them in the most efficient manner possible. 

Most of the research work currently is focusing on spectrum sensing cogni- 
tive radio— particularly on the utilization of TV bands for communication. The 
essential problem of spectrum sensing CR is the design of high quality sensing 
devices and algorithms for exchanging spectrum sensing data between nodes. It 
has been shown in [6] that a simple energy detector cannot guarantee accurate 
detection of signal presence. This calls for more sophisticated spectrum sensing 
techniques and requires that information about spectrum sensing be exchanged 
between nodes regularly. 

It is not implicit that a CR must be software-defined radio. It is possible 
to implement CR features—the ability to detect and avoid (protect) incumbent 
users—while using relatively conventional radio transmitter/receiver architec- 
tures and techniques. The goal of CR is to relieve radio spectrum overcrowding, 
which actually translates to a lack of access to full radio spectrum utilization. 


23.6 Summary 

The 4G system was conceived by the Defense Advanced Research Projects Agency 
(DARPA). DARPA selected the distributed architecture, end-to-end Internet proto- 
col (IP), and peer-to-peer networking in which every device is both a transceiver and 
a router for other devices in the network eliminating the spoke-and-hub weakness 
of 2G and 3G cellular systems. In the 4G system network coverage/capacity will 
change dynamically to accommodate changing user patterns. Users will automati- 
cally move from congested routes to allow the network to dynamically self-balance. 
The 4G technologies will include instantaneous channel condition estimations of 
several users to distribute transmission load, better access methods than 3G, adaptive 
antenna, adaptive coding and modulation, adaptive channel/code allocation, and 
scheduling among sectors and users. Applications of 4G will be virtual presence, 
virtual navigation, tele-medicine, tele-geo-processing applications, and online edu- 
cation. 4G is still in a formative stage. Its commercial application is likely to be in 
2010. The ITU-WG 8F has started to consider 4G requirements. 


Problems 
23.1 Define the role of the 4G system. 


23.2 Compare the 3G and 4G systems. 
23.3 Discuss multicarrier modulation (МСМ). 
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23.4 What is a multi-input multi-output (MIMO) system? Explain. 


23.5 How are higher spectral efficiency and increased throughput achieved in 


the OFDM-MIMO system? 


23.6 What is the BLAST system? Explain. 
23.7 What is the software-defined radio system? 


23.8 What is cognitive radio? 


23.9 List some of the new technologies that will be used in the 4G system. 
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APPENDIX В 


Path Loss over a Reflecting 
Surface 


B.1 Path Loss over a Reflecting Surface 

When the two antennas (transmitting and receiving) are on the earth, then there 
are multiple paths from the transmitter to the receiver. The effect of the multiple 
paths is the change in the path loss between two points. The simplest case is when 
the antenna heights, hp and bm, are small compared with their separation, d, and 
the reflecting earth surface is assumed to be flat. The received signal is then repre- 
sented by a scattered field, Es, that is approximated by a combination of a direct 
wave and reflected wave (see Figure B.1). 


E, = [1 + ce JE (B.1) 


Е; = [1 + c,(cosA0 + jsinA0)]E (B.2) 


zs E 


n d d,: length of direct path = (1— 3) 

pid d,: length of reflected path = (1— 2) + (2 — 3) 
крп Ad- d,- d, 

Image of transmitting antenna 
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Figure В.1 А model for path loss with reflection. 
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where: 
c, = coefficient of reflection 
E = electric field 
A0 = phase difference between the direct and reflected path 


A0 = 2* (d, - da) = Far (B.3) 


where: 
Ad = difference between direct path and reflected path 


In the mobile radio environment, c, = —1, and A0 is much less than one 
radian. Thus Equation B.2 can be written as: 


E, = —EjA0 (B.4) 


Since the received power P, is proportional to the square of the field strength, 
the power level at the antenna output located at the distance, d, from the transmitter, 
including the path loss, will be: 


2Р,СьС |. 
р, =| Ap ae? (B.S) 


From Figure B.1 

dg = \ (hp — bm)? + d? 
and using image property 

d, = N(by + by)? + d? 


Ad = d,- da= |1 + Pe bo | _ gly 4 me hn | 
: d 


Ad = 41 + (+) + a - 41 + (i) Ber + | 
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When hy and hy, < < d, then 


2, 2рьр,, 


Ad 1 


AG = HEZ 


Substituting for A0 from Equation B.7 into Equation B.5, we get 


P, = E Р,СьС,„ 


2 Т, 
on d 0 


P, [bbs GoGin 
P, d? Lo 
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APPENDIX С 


Error Functions 


Errors are used in engineering and science applications when we deal with the 
Gaussian or normal probability density functions. As we observe in Chapter 7, 
error probabilities are often expressed in terms of the error function. 

The error function of и, represented by erf(u), is given as 


eae WE 
еги) = 2 | e^ dy (C.1) 
Another related function is the complementary error function, erfc(u), given as 
erfc(u) — a e`} dy (C.2) 
The erf(u) and erfc(u) are related through 
erf(u) + erfc(u) = 1 (C.3) 
As и tends to infinity, erf(4) approaches unity, i.e., 
ебе) = 2. Í i ded (C.4) 
The following is the property of the error function: 


erf(—u) = —erf(u) (C.5) 


This is referred to as the symmetry property. 
Another function, which is commonly used in communication theory is the 
O function, given as 


QU) = zl | edy (C.6) 
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The O function defines the area under the standardized Gaussian tail. The O 
function is related to the complementary error function. 
Comparing Equations C.2 and C.6, we obtain 


erfc(u) = 20(V2u) (C.7) 


or 


s. 


О(и) = уе 75 


(С.8) 


Tables С.1 and C.2 list the values of O(x). 
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TABLE C.1 Values of Q(x) versus x. 


0.0 
0.1 
0.2 
0.3 
0.4 
0.5 
0.6 
0.7 
0.8 
0.9 
1.0 
1.1 
1.2 
1.3 
1.4 
1.5 
1.6 
1.7 
1.8 
1.9 
2.0 
2.1 
2.2 
2.3 
2.4 
2.5 
2.6 
2.7 
2.8 
2.9 


0.00 


.5000 
.4602 
.4207 
.3821 
.3446 
.3085 
.2743 
.2420 
.2119 
.1841 
.1587 
.1357 
.1151 
.0968 
.0808 
.0668 
.0548 
.0446 
.0359 
.0287 
.0228 
.0179 
.0139 
.0107 
.00820 
.00621 
.00466 
.00347 
.00256 
.00187 


0.01 


.4960 
.4562 
.4168 
.3783 
.3409 
.3050 
.2709 
.2389 
.2090 
.1814 
.1562 
.1335 
.1131 
.0951 
.0793 
.0655 
.0537 
.0436 
.0351 
.0281 
.0222 
.0174 
.0136 
.0104 
.00798 
.00604 
.00453 
.00336 
.00248 
.00181 


0.02 


.4920 
.4522 
.4129 
.3745 
.3372 
.3015 
.2676 
.2358 
.2061 
.1788 
.1539 
.1314 
.1112 
.0934 
.0778 
.0643 
.0526 
.0427 
.0344 
.0274 
.0217 
.0170 
.0132 
.0102 
.00776 
.00587 
.00440 
.00326 
.00240 
.00175 


0.03 


.4880 
.4483 
.4090 
.3707 
.3336 
.2981 
.2643 
.2327 
.2033 
.1762 
.1515 
.1292 
.1093 
.0918 
.0764 
.0630 
.0516 
.0418 
.0336 
.0268 
.0212 
.0166 
.0129 
.00990 
.00755 
.00570 
.00427 
.00317 
.00233 
.00169 


0.04 


.4840 
4443 
.4052 
.3669 
.3300 
.2946 
2611 
.2296 
.2005 
.1736 
.1492 
1271 
1075 
.0901 
.0749 
.0618 
.0505 
.0409 
.0329 
.0262 
.0207 
.0162 
.0125 
.00964 
.00734 
.00554 
.00415 
.00307 
.00226 
.00164 


0.05 


.4801 
.4404 
.4013 
.3632 
.3264 
.2912 
.2578 
.2266 
.1977 
.1711 
.1469 
.1251 
.1056 
.0885 
.0735 
.0606 
.0495 
.0401 
.0322 
.0256 
.0202 
.0158 
.0122 
.00939 
.00714 
.00539 
.00402 
.00298 
.00219 
.00159 


0.06 


.4761 
.4364 
.3974 
.3594 
.3228 
.2877 
.2546 
.2236 
.1949 
.1685 
.1446 
.1230 
.1038 
.0869 
.0721 
.0594 
.0485 
.0392 
.0314 
.0250 
.0197 
.0154 
.0119 
.00914 
.00695 
.00523 
.00391 
.00289 
.00212 
.00154 


0.07 


.4721 
.4325 
.3936 
.3557 
.3192 
.2843 
.2514 
.2206 
.1922 
.1660 
.1423 
.1210 
.1020 
.0853 
.0708 
.0582 
.0475 
.0384 
.0307 
.0244 
.0192 
.0150 
.0116 
.00889 
.00676 
.00508 
.00379 
.00280 
.00205 
.00149 


0.08 


.4681 
.4286 
.3897 
.3520 
.3156 
.2810 
.2483 
.2177 
.1894 
.1635 
.1401 
.1190 
.1003 
.0838 
.0694 
.0571 
.0465 
.0375 
.0301 
.0239 
.0188 
.0146 
.0113 
.00866 
.00657 
.00494 
.00368 
.00272 
.00199 
.00144 


0.09 


.4641 
.4247 
.3859 
.3483 
.3121 
2716 
2451 
.2148 
.1867 
.1611 
.1379 
.1170 
.0985 
.0823 
.0681 
.0559 
.0455 
.0367 
.0294 
.0233 
.0183 
.0143 
.0110 
.00842 
.00639 
.00480 
.00357 
.00264 
.00193 
.00139 
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TABLE C.2 Values of Q(x) for large values of x. 


x 10log x Q(x) x 10log x Q(x) x 10log x Q(x) 


3.00 4.77 1.35E-03 4.00 6.02 3.17E-05 5.00 6.99 2.87E-07 
3.05 4.84 1.14E-03 4.05 6.07 2.56E-05 5.05 7.03 2.21E-07 
3.10 4.91 9.68E-04 4.10 6.13 2.07E-05 5.10 7.08 1.70E-07 
3.15 4.98 8.16E-04 4.15 6.18 1.66E-05 5.15 7.12 1.30E-07 
3.20 5.05 6.87E-04 4.20 6.23 1.33E-05 5.20 7.16 9.96E-08 
3.25 5.12 5.77E-04 4.25 6.28 1.07E-05 5.25 7.20 7.61E-08 
3.30 5.19 4.83E-04 4.30 6.33 8.54E-06 5.30 7.24 5.79E-08 
3.35 5.25 4.04E-04 4.35 6.38 6.81E-06 5.35 7.28 4.40E-08 
3.40 5.31 3.37E-04 4.40 6.43 5.41E-06 5.40 7.32 3.33E-08 
3.45 5.38 2.80E-04 4.45 6.48 4.29E-06 5.45 7.36 2.52E-08 
3.50 5.44 2.33E-04 4.50 6.53 3.40E-06 5.50 7.40 1.90E-08 
3.55 5.50 1.93E-04 4.55 6.58 2.68E-06 5.55 7.44 1.43E-08 
3.60 5.56 1.59E-04 4.60 6.63 2.11E-06 5.60 7.48 1.07E-08 
3.65 5.62 1.31E-04 4.65 6.67 1.66E-06 5.65 7.52 8.03E-09 


3.70 5.68 1.08E-04 4.70 6.72 1.30E-06 5.70 7.56 6.00E-09 
3.75 5.74 8.84E-05 4.75 6.77 1.02E-06 5.75 7.60 4.47E-09 
3.80 5.80 7.23E-05 4.80 6.81 7.93E-07 5.80 7.63 3.32E-09 
3.85 5.85 5.91E-05 4.85 6.86 6.17E-07 5.85 7.67 2.46E-09 
3.90 5.91 4.81E-05 4.90 6.90 4.79E-07 5.90 7.71 1.82E-09 


3.95 5.97 3.91E-05 4.95 6.95 3.71E-07 5.95 7.75 1.34E-09 


APPENDIX D 
Spreading Codes Used in CDMA 


In this appendix, we discuss Walsh codes, PN sequences, and Gold codes [1-9]. 


D.1 Walsh Codes 

Walsh codes are used in direct sequence spread spectrum (DSSS) systems (such as 
IS-95, cdma2000, etc.). They are also used in frequency hopping spread spectrum 
(FHSS) systems to select the target frequency for the next hop (see Chapter 11). 

Walsh codes are orthogonal codes. As such, if two Walsh codes are correlated, 
the result is intelligible only if these two codes are the same. As a result, a Walsh- 
encoded signal appears as random noise to a CDMA-capable mobile terminal, 
unless that terminal uses the same code as the one used to encode the incoming 
signal. We denote W(k, n) as Walsh code k in the n-length Walsh matrix, where 
Ё = 0, 1, ...,и- 1. 

The CDMA system requires orthogonal codes for channel selection. Since 
CDMA systems use the same frequency bands for all transmissions, only a differ- 
ent code can be used to select a channel. 

Orthogonal codes have the following characteristics: 


N=1 
У Ат) (Ат — nt) = 0,1 рп =0,1,..,N-1 (D.1) 
k-0 


Equation D.1 implies that the cross-correlation of two different symbol shapes is 
zero for all time offsets, and 


N=1 
У Wiki) Wiki- пт) = 0,2 = 1,..‚М—1 (D.2) 
k=0 


where: 

W((kt) and W,(kt) = the ith and jth orthogonal members of an orthogonal 
set 

N = the length of set 

7 = the symbol duration 
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Equation D.2 implies that for all time offsets other than zero, each spreading 
code is orthogonal to itself. The orthogonality conditions in Equations D.1 and 
D.2 mean that different user signals can be separated at the receiver, even though 
they use the same frequency channel and the same period. 

Walsh codes are generated using the Hadamard matrix with H4 = [0], where 
Hi isa 1 X 1 matrix and is an order 1. The Hadamard matrix is built by 


H, H, 
Hn = | 


H, H. (D.3) 


For example, the Hadamard matrix of order 2 and 4 will be: 


_ [00 
Н» lo А апа 


Н; = |9101 


From the corresponding Hadamard matrix, the Walsh codes аге given by the 
rows. We usually map the binary data to polar form so we can use real num- 
ber arithmetic when computing correlations. So 0s are mapped to 1s and 1s are 
mapped to —1s. 

This means the kth row of the H(z) Hadamard matrix is (see below for 
examples): 


H(0) =1 
W(0,0) =1 
на) || 
w(0,2) = 1,1 
W(1, 2) =1, -1 

1 1 1 1 
uiii 
1-1-1 1 
Ү(0, 4) = 1, 1, 1,1 
Wi, 4) = 1, -1,1, -1 
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Figure D.1 OVSF tree. 


The basic set of Walsh codes is the set of four patterns—0000, 0101, 0011, 
0110. When the Walsh codes modulate the transmitter, bi-phase shift keying is used. 
Thus, 0 represents 0° phase shift and 1 represents 180° phase shift. The 64 orthogo- 
nal Walsh codes provide the basis for the COMA modulation used in IS-95. 

Walsh codes form the basis for variable spreading codes with different 
spreading factors. This property becomes useful when we want signals with differ- 
ent spreading factors to share the same frequency channel (such as in 3G systems). 
The codes that possess this property are called orthogonal variable spreading fac- 
tors (OVSF). To construct such codes, it is better to use a different approach 
than matrix manipulation. Using a tree structure allows better visualization of the 
relation between different code lengths and the orthogonality between them (see 
Figure D.1). 

For example, let’s examine the codeword denoted W(1, 2) and the codeword 
denoted W(2, 4) to see if they are orthogonal. Since they are of different lengths, 
we repeat W(1, 2) to match the length of W(2, 4). Hence, we get the following 
two code words in polar form: 


wi, 2) > [1-1 1-1] 
W(2,4) > 11 1-1-1] 
Computing the orthogonality, we get 
(1 x1)+(-1X1)+ (1x -1)+(-1 x -1)=1-1-1+1=0 


Hence, W(1, 2) and W(2, 4) are orthogonal. 

The autocorrelation function of Walsh codes does not have good characteristics. 
It can have more than one peak, and therefore it is not possible for a receiver to detect 
the beginning of the code word without an external synchronization scheme. The 
cross-correlation can also be non-zero for a number of time shifts and unsynchro- 
nized users can interfere with each other. This is why Walsh codes can only be used in 
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synchronous CDMA systems. Walsh codes do not have the best spreading behavior. 
They do not spread data as well as pseudo-noise (PN) sequences do because their 
power spectral density is concentrated in small numbers of discrete frequencies. 


D.2 PN Sequences 
As mentioned in Section D.1, the Walsh codes provide good orthogonality properties 
when they are aligned in time. Their orthogonality may suffer when they are not aligned 
in time. Ideally, we would like to have sequences that are orthogonal for all time shifts. 
However, in practice the sequences that are approximately orthogonal are achievable. 
One class of sequences that satisfies this condition is the class of PN sequences. 

Various pseudorandom codes are generated using linear feedback shift 
register (LFSR). The generator polynomial governs all the characteristics of the 
generator. The feedback generator uses only the output bit to add several stages 
of shift register. This is desirable for high speed hardware implementation as 
well as software implementation. Shift-register sequences having the maximum 
possible period for an n-shift register are called maximal length sequences or 
m-sequences. A primitive generator polynomial always yields an m-sequence. The 
maximum period of an m-stage shift register is Т = 2" — 1. The m-sequences 
have three important properties (balance property, run-length property, and shift- 
and-add property), which are formulated as follows: T&u = T'uT/u, where u is 
an m-sequence. By combining two shifts of this sequence (relative shift i and j) we 
obtain the same m-sequence, yet with another relative shift. 

The periodic autocorrelation function R,(k) is two-valued and is given by: 


k — IT 


2 1 
Ra(k) = 1 k IT 
T 


where: 
I = an integer 
T = period of m-sequence 


The cross-correlation of m-sequences is not as well behaved as autocorrelation. 
An m-sequence generating system with four shift registers is shown in 
Figure D.2. This can be expressed using the recursive relation: 


Figure D.2 4-Stage shift register for generating m-sequences. 
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X40 + 1) = Xa(1) + Xa(1) (D.4) 
where i = 0, 1,2, ... 


Because m-sequences are periodic and shift registers cycle through every 
binary value (with the exception of a zero vector), registers can be initialized to 
any state, with the exception of the zero vector. 

m-sequences are inexpensive to implement in hardware or software, and rel- 
atively low-order feedback shift registers can generate long sequences. A sequence 
generated using 20 shift registers is 229 — 1 samples long. 

The number of m-sequences that can be generated by an n linear shift-register 
generator is given as: 


(D.5) 


N,(n) = number of PN sequences 
number of shift registers in a generator 
Pj = prime decomposition of 2" — 1 


3 
Il 


In Table D.1, feedback connections (even numbers) are given for m-sequences 
generated with a linear shift register generator (without image set). 

For every set [n, k, ..., p] feedback taps listed in Table D.1, there exists an 
image set (reverse set) of feedback taps [n, п — k, ..., n — p] that generates an 
identical sequence reversed in time. 


Table D.1 Feedback connections for m-sequences. 


n T—2^—1 Feedback taps for m-sequences No. of m- 
sequences 
2 3 [2, 1] 1 
3 7 [3, 1] 2 
4 15 [4, 1] 2 
5 31 [5, 3]; [5, 4, 3, 2]; [5, 4, 2, 1] 6 
6 63 [6, 1]; [6, 5, 2, 1]; [6, 5, 3, 2] 4 
7 127 [7, 6, 4, 2]; [7, 6, 3, 1]; [7, 6, 5, 2]; 18 
[7, 6, 5, 4, 2, 1]; [7, 5, 4, 3, 2, 1] 
8 255 , 4, 3, 2]; [8, 6, 5, 3]; [8, 6, 5, 2]; 16 


[8, 4, 3 
[8, 5, 3, 1]; I8, 6, 5, 1]; [8, 7, 6, 1]; 
[8, 7, 6, 5, 2, 1]; I8, 6, 4, 3, 2, 1] 


rir 
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Example D.1 

Using the shift register shown in Figure D.3, generate an m-sequence (Table D.2) 
and demonstrate its properties. Sketch the autocorrelation function. 

The generated m-sequence has been plotted in Figure D.4. 


Figure D.3 3-stage shift register for generating first m-sequence. 


Table D.2 First m-sequence using 3-stage shift register. 


X Xo Хз Output 
Initial Stage 0 0 1 1 
Shift 1 1 0 0 0 
Shift 2 0 1 0 0 
Shift 3 1 0 1 1 
Shift 4 1 1 0 0 
Shift 5 1 1 1 1 
Shift 6 0 1 1 1 
Shift 7 0 0 1 1 


> Time 


Figure D.4 7-chip first m-sequence. 
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The properties of m-sequence in Figure D.4 are: 
* Number of —1s = 4; number of 1s = 3 
• Run length 1 = 2 
* Run length 2 = 1 
* Run length 3 = 1 


Example D.2 

Since two m-sequences can be generated by the 3-stage shift register (see Table D.3), 
what is the location of the modulo-2 adder for the second m-sequence? Generate 
the second m-sequence. 


Solution 


The location of modulo-2 adder for the second m-sequence is shown in 
Figure D.5. 
Properties of m-sequence in Figure D.6 are: 


* Number of —1s = 4; number of 1s = 3 
* Run length 1 = 2 
* Run length 2 = 1 
* Run length 3 = 1 


The autocorrelation for this 7-sequence will be as shown in Figure D.7. 


Table D.3 Second m-sequence using 3-stage shift register. 


x Х› Хз Output 
Initial State 0 0 1 1 
Shift 1 1 0 0 0 
Shift 2 1 1 0 0 
Shift 3 1 1 1 1 
Shift 4 0 1 1 1 
Shift 5 1 0 1 1 
Shift 6 0 1 0 0 
Shift 7 0 0 1 1 


Figure D.5 3-stage shift register for generating second m-sequence. 
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> Time 


Figure 0.6 7-chip second m-sequence. 


-1/7 


Figure D.7 Autocorrelation for m-sequence. 


m-sequence 1 
(t= 0) 


H> Gold sequence (k) 


m-sequence 2 
(t= kT) 


Figure D.8 Generation of Gold sequence. 


D.3 Gold Codes 


The family of PN sequences, called Gold sequences, are particularly popular for 
nonorthogonal CDMA systems. Gold sequences have only three cross-correlation 
peaks, which tends to get less important as the length of the code increases. 
Gold codes are constructed from a modulo-2 addition of two maximum length 
sequences. The code sequences are added chip by chip by synchronous clocking. 
Because the m-sequences are of the same length, the two code generators maintain 
the same phase relationship, and the codes generated (see Figure D.8) are of the 
same length as the two base codes, which are added together, but nonmaximal 
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Table D.4 Preferred m-sequences normalized cross-correlations. 


n Period (T) Normalized 3-value cross-correlations 
Odd 20-1 = AT, = [2*2 + трут, [2/^* 2 — 1yT 


Even 2-1 —1/Т, [200428 + түт, [2100+22 — 1ут 


(so the autocorrelation function will be worse than that of m-sequences). Every 
change in phase position between two generated m-sequences causes a new sequence 
to be generated. 

In addition to their advantage in generating large numbers of codes, the 
Gold codes may be selected so that over a set of codes available from a given 
generator the autocorrelation and cross-correlation between the codes is uniform 
and bounded. When specially selected m-sequences, called preferred m-sequences, 
are used, the generated Gold codes have a three-valued cross-correlation. 

Preferred m-sequences are pairs of m-sequences with specific three-valued 
cross-correlation (see Table D.4). Preferred pairs for shift-register with a length 
equal to 4 I, where I is an integer, do not exist. 

Gold codes will permit multiple access on the channel. With two m-sequences 
alone, we can generate 2" + 1 Gold codes (a combination with 2" — 1 different 
shift positions and 2 sequences). 

The use of Gold codes permits the transmission to be asynchronous. The 
receiver can synchronize using the autocorrelation property of the Gold code. The 
following are the properties of Gold codes: 


* Period T equal to m-sequence 
* Three-valued cross-correlation function with values are (—1, t(n), —t(2) — 2}, 


where: 


L2 0*2 + 4 for odd п 
2(00*2/2 + 1 for even n 
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APPENDIX E 


Power Units 


E.1 Power Units 
In this appendix we explain the difference between dBm and dB. Power (P) in 
milliwatts (mW) can be expressed as: 


P(mW) 
P(mW) = TET (E.1) 
The power (P) in terms of dBm will be: 
P(dBm) = 10log[P(mW)] — 10log(1mW) = 10log[P(mW)] (E.2) 


In other words, the power in dBm is an absolute measure of the power in mW. 
For example, 100 mW of power is 20 dBm, 1 W of power is 0 dBW or 30 dBm, 
and 14 W is —30 dBm. 

The unit dB is the ratio of two powers in identical units. For example, if the 
average signal power (P) is 10,000 mW and average noise power (N) is 100 mW, 
then we can express signal-to-noise ratio (SNR) as: 


_ Signal power (mW) 


SNR (E.3) 


Noise power (mw) 


or 


SNR(dB) = 10log[P(mW)] — 10log[N(mW)] = 40 — 20 = 20 (E.4) 


Thus, the SNR in dB provides information on how strong or how weak the 
signal is relative to the noise. In the example, the signal power is 100 times stron- 
ger than noise power, since dB expresses the ratio and therefore is not a measure 
of the absolute power. Because of this reason, we can write: 


Transmit Power(dBm) = Received power (dBm) + Path loss (dBm) (E.5) 


E-1 
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